From 74ea2f7c2ee7e92bcf784a8fff610b3971eab800 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 12 Oct 2025 23:53:14 -0400
Subject: [PATCH 001/427] fix: set correct labels for
 tests/apps/dockerfile-release pip updates

---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 026074260..76bbffc3d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -393,6 +393,13 @@ updates:
     open-pull-requests-limit: 10
     labels:
       - "type: dependencies"
+  - package-ecosystem: pip
+    directory: "/tests/apps/dockerfile-release"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+    labels:
+      - "type: dependencies"
   - package-ecosystem: "docker"
     directory: "/tests/apps/dockerfile-app-json-formations"
     schedule:

From ab7c4098c2e05ba6d000ad6b45acf092f52dd395 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Oct 2025 13:32:07 +0000
Subject: [PATCH 002/427] chore(deps): bump github.com/gofrs/flock in
 /plugins/scheduler-k3s

Bumps [github.com/gofrs/flock](https://github.com/gofrs/flock) from 0.12.1 to 0.13.0.
- [Release notes](https://github.com/gofrs/flock/releases)
- [Commits](https://github.com/gofrs/flock/compare/v0.12.1...v0.13.0)

---
updated-dependencies:
- dependency-name: github.com/gofrs/flock
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 4 ++--
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 1f556982c..d0c40cfa6 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -3,6 +3,7 @@ module github.com/dokku/dokku/plugins/scheduler-k3s
 go 1.25.1
 
 require (
+	github.com/Masterminds/semver/v3 v3.4.0
 	github.com/cert-manager/cert-manager v1.19.0
 	github.com/dokku/dokku/plugins/app-json v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/common v0.0.0-20250618161309-8d0c35f1333c
@@ -15,7 +16,7 @@ require (
 	github.com/fluxcd/pkg/kustomize v1.23.0
 	github.com/go-openapi/jsonpointer v0.22.1
 	github.com/go-resty/resty/v2 v2.16.5
-	github.com/gofrs/flock v0.12.1
+	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
 	github.com/kedacore/keda/v2 v2.17.1-0.20250708210620-a239d2459a35
@@ -41,7 +42,6 @@ require (
 	github.com/BurntSushi/toml v1.5.0 // indirect
 	github.com/MakeNowJust/heredoc v1.0.0 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
-	github.com/Masterminds/semver/v3 v3.4.0 // indirect
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/Masterminds/squirrel v1.5.4 // indirect
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 6853026e4..026b21cfb 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -134,8 +134,8 @@ github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1v
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
-github.com/gofrs/flock v0.12.1 h1:MTLVXXHf8ekldpJk3AKicLij9MdwOWkZ+a/jHHZby9E=
-github.com/gofrs/flock v0.12.1/go.mod h1:9zxTsyu5xtJ9DK+1tFZyibEV7y3uwDxPPfbxeeHCoD0=
+github.com/gofrs/flock v0.13.0 h1:95JolYOvGMqeH31+FC7D2+uULf6mG61mEZ/A8dRYMzw=
+github.com/gofrs/flock v0.13.0/go.mod h1:jxeyy9R1auM5S6JYDBhDt+E2TCo7DkratH4Pgi8P+Z0=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=

From 48e120c54c729465e1203432c6df7a1baad8dbfa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Oct 2025 13:32:40 +0000
Subject: [PATCH 003/427] chore(deps): bump github.com/kedacore/keda/v2 in
 /plugins/scheduler-k3s

Bumps [github.com/kedacore/keda/v2](https://github.com/kedacore/keda) from 2.17.1-0.20250708210620-a239d2459a35 to 2.18.0.
- [Release notes](https://github.com/kedacore/keda/releases)
- [Changelog](https://github.com/kedacore/keda/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kedacore/keda/commits/v2.18.0)

---
updated-dependencies:
- dependency-name: github.com/kedacore/keda/v2
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod |  8 ++++----
 plugins/scheduler-k3s/go.sum | 24 ++++++++++++------------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 1f556982c..0a01e0700 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -3,6 +3,7 @@ module github.com/dokku/dokku/plugins/scheduler-k3s
 go 1.25.1
 
 require (
+	github.com/Masterminds/semver/v3 v3.4.0
 	github.com/cert-manager/cert-manager v1.19.0
 	github.com/dokku/dokku/plugins/app-json v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/common v0.0.0-20250618161309-8d0c35f1333c
@@ -18,7 +19,7 @@ require (
 	github.com/gofrs/flock v0.12.1
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
-	github.com/kedacore/keda/v2 v2.17.1-0.20250708210620-a239d2459a35
+	github.com/kedacore/keda/v2 v2.18.0
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	github.com/traefik/traefik/v2 v2.11.29
@@ -41,7 +42,6 @@ require (
 	github.com/BurntSushi/toml v1.5.0 // indirect
 	github.com/MakeNowJust/heredoc v1.0.0 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
-	github.com/Masterminds/semver/v3 v3.4.0 // indirect
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/Masterminds/squirrel v1.5.4 // indirect
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
@@ -62,7 +62,7 @@ require (
 	github.com/evanphx/json-patch v5.9.11+incompatible // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
-	github.com/expr-lang/expr v1.17.5 // indirect
+	github.com/expr-lang/expr v1.17.6 // indirect
 	github.com/fastfishio/qson v1.0.2 // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
@@ -137,7 +137,7 @@ require (
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
-	github.com/spf13/cast v1.9.2 // indirect
+	github.com/spf13/cast v1.10.0 // indirect
 	github.com/spf13/cobra v1.10.1 // indirect
 	github.com/traefik/paerser v0.2.2 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 6853026e4..f0a2319a0 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -83,8 +83,8 @@ github.com/evanphx/json-patch/v5 v5.9.11 h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjT
 github.com/evanphx/json-patch/v5 v5.9.11/go.mod h1:3j+LviiESTElxA4p3EMKAB9HXj3/XEtnUf6OZxqIQTM=
 github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f h1:Wl78ApPPB2Wvf/TIe2xdyJxTlb6obmF18d8QdkxNDu4=
 github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f/go.mod h1:OSYXu++VVOHnXeitef/D8n/6y4QV8uLHSFXX4NeXMGc=
-github.com/expr-lang/expr v1.17.5 h1:i1WrMvcdLF249nSNlpQZN1S6NXuW9WaOfF5tPi3aw3k=
-github.com/expr-lang/expr v1.17.5/go.mod h1:8/vRC7+7HBzESEqt5kKpYXxrxkr31SaO8r40VO/1IT4=
+github.com/expr-lang/expr v1.17.6 h1:1h6i8ONk9cexhDmowO/A64VPxHScu7qfSl2k8OlINec=
+github.com/expr-lang/expr v1.17.6/go.mod h1:8/vRC7+7HBzESEqt5kKpYXxrxkr31SaO8r40VO/1IT4=
 github.com/fastfishio/qson v1.0.2 h1:AY1E9RjVQ9iNPP6G9NQcEXtHXBBq204zUR0tsNFIxFY=
 github.com/fastfishio/qson v1.0.2/go.mod h1:QHBKJuWMgwEGYxdK3s1JKiRKwm5VgJx6vU3+kQa/kOU=
 github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
@@ -128,8 +128,8 @@ github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZs
 github.com/go-resty/resty/v2 v2.16.5 h1:hBKqmWrr7uRc3euHVqmh1HTHcKn99Smr7o5spptdhTM=
 github.com/go-resty/resty/v2 v2.16.5/go.mod h1:hkJtXbA2iKHzJheXYvQ8snQES5ZLGKMwQ07xAwp/fiA=
 github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg=
-github.com/go-sql-driver/mysql v1.9.1 h1:FrjNGn/BsJQjVRuSa8CBrM5BWA9BWoXXat3KrtSb/iI=
-github.com/go-sql-driver/mysql v1.9.1/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
+github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
+github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
 github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
@@ -194,8 +194,8 @@ github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnr
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
-github.com/kedacore/keda/v2 v2.17.1-0.20250708210620-a239d2459a35 h1:dVamAZ0mkRedF4AMZDFoaV1lakRfdfrzN9tvk+zgAlk=
-github.com/kedacore/keda/v2 v2.17.1-0.20250708210620-a239d2459a35/go.mod h1:WGhOV69k9YW3iTSj592glrCOqdO9Zy8hmYcyStZ5+tk=
+github.com/kedacore/keda/v2 v2.18.0 h1:ttR223fii/4QJ0YvtrhcWHaEoezByb/t5CeFopjl6EI=
+github.com/kedacore/keda/v2 v2.18.0/go.mod h1:pw+qlQwMzj3T8LMayUnOtT15Gt1yRPF3lS1r5rt9F5k=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
@@ -258,8 +258,8 @@ github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8m
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
 github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
-github.com/onsi/ginkgo/v2 v2.23.4 h1:ktYTpKJAVZnDT4VjxSbiBenUjmlL/5QkBEocaWXiQus=
-github.com/onsi/ginkgo/v2 v2.23.4/go.mod h1:Bt66ApGPBFzHyR+JO10Zbt0Gsp4uWxu5mIOTusL46e8=
+github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
+github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
 github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
@@ -298,8 +298,8 @@ github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5 h1:EaDatTxkdHG+U3Bk4EUr+DZ7fO
 github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5/go.mod h1:fyalQWdtzDBECAQFBJuQe5bzQ02jGd5Qcbgb97Flm7U=
 github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb27yVE+gIAfeqp8LUCc=
 github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ=
-github.com/redis/go-redis/v9 v9.8.0 h1:q3nRvjrlge/6UD7eTu/DSg2uYiU2mCL0G/uzBWqhicI=
-github.com/redis/go-redis/v9 v9.8.0/go.mod h1:huWgSWd8mW6+m0VPhJjSSQ+d6Nh1VICQ6Q5lHuCH/Iw=
+github.com/redis/go-redis/v9 v9.14.0 h1:u4tNCjXOyzfgeLN+vAZaW1xUooqWDqVEsZN0U01jfAE=
+github.com/redis/go-redis/v9 v9.14.0/go.mod h1:huWgSWd8mW6+m0VPhJjSSQ+d6Nh1VICQ6Q5lHuCH/Iw=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
 github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
@@ -321,8 +321,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp
 github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
-github.com/spf13/cast v1.9.2 h1:SsGfm7M8QOFtEzumm7UZrZdLLquNdzFYfIbEXntcFbE=
-github.com/spf13/cast v1.9.2/go.mod h1:jNfB8QC9IA6ZuY2ZjDp0KtFO2LZZlg4S/7bzP6qqeHo=
+github.com/spf13/cast v1.10.0 h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY=
+github.com/spf13/cast v1.10.0/go.mod h1:jNfB8QC9IA6ZuY2ZjDp0KtFO2LZZlg4S/7bzP6qqeHo=
 github.com/spf13/cobra v1.10.1 h1:lJeBwCfmrnXthfAupyUTzJ/J4Nc1RsHC/mSRU2dll/s=
 github.com/spf13/cobra v1.10.1/go.mod h1:7SmJGaTHFVBY0jW4NXGluQoLvhqFQM+6XSKD+P4XaB0=
 github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=

From b9c961ecf011104a7cfb0120f08a4b1d237048ee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 13:04:10 +0000
Subject: [PATCH 004/427] chore(deps): bump actions/setup-node from 5 to 6

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/lint.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index ecbf36432..01a747d6a 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -32,7 +32,7 @@ jobs:
       - name: Clone
         uses: actions/checkout@v5
       - name: Setup node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           cache: 'npm'

From 26deba590622533134cb837662a856745fd1a3f5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 13:05:34 +0000
Subject: [PATCH 005/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-tini

Bumps golang from 1.25.2 to 1.25.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-tini/Dockerfile b/tests/apps/zombies-dockerfile-tini/Dockerfile
index 1c640ed3b..8d708509c 100644
--- a/tests/apps/zombies-dockerfile-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.2
+FROM golang:1.25.3
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 21f7127a6bdf15621af78a628b7ced64a6f21fe8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 13:05:34 +0000
Subject: [PATCH 006/427] chore(deps): bump golang in
 /tests/apps/go-fail-postdeploy

Bumps golang from 1.25.2 to 1.25.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-postdeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-postdeploy/Dockerfile b/tests/apps/go-fail-postdeploy/Dockerfile
index c8e4f6ce5..3bd2c040b 100644
--- a/tests/apps/go-fail-postdeploy/Dockerfile
+++ b/tests/apps/go-fail-postdeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.2
+FROM golang:1.25.3
 
 EXPOSE 3000/tcp
 

From 68f15894fd2fe10561c9a5305272af208550e6c4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 13:05:35 +0000
Subject: [PATCH 007/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-no-tini

Bumps golang from 1.25.2 to 1.25.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-no-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-no-tini/Dockerfile b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
index 1ec7c1e1b..8c7938d4c 100644
--- a/tests/apps/zombies-dockerfile-no-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.2
+FROM golang:1.25.3
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 290508fe30ad26ca047a17df28c3fee97549f51b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 13:05:56 +0000
Subject: [PATCH 008/427] chore(deps): bump golang in
 /tests/apps/go-fail-predeploy

Bumps golang from 1.25.2 to 1.25.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-predeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-predeploy/Dockerfile b/tests/apps/go-fail-predeploy/Dockerfile
index c8e4f6ce5..3bd2c040b 100644
--- a/tests/apps/go-fail-predeploy/Dockerfile
+++ b/tests/apps/go-fail-predeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.2
+FROM golang:1.25.3
 
 EXPOSE 3000/tcp
 

From 4c1401dccd982e803c9f199daaeeea737a305f25 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 13:06:02 +0000
Subject: [PATCH 009/427] chore(deps): bump golang from 1.25.2 to 1.25.3 in
 /tests/apps/gogrpc

Bumps golang from 1.25.2 to 1.25.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/gogrpc/Dockerfile b/tests/apps/gogrpc/Dockerfile
index 435f3c233..98d2c5d4e 100644
--- a/tests/apps/gogrpc/Dockerfile
+++ b/tests/apps/gogrpc/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.2
+FROM golang:1.25.3
 
 RUN mkdir /app
 WORKDIR /app

From 4db5d58e6e25fbcd1f84d2ee2483f21446a4cc77 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 21:23:22 +0000
Subject: [PATCH 010/427] chore(deps): bump django in
 /tests/apps/dockerfile-release

Bumps [django](https://github.com/django/django) from 5.1.13 to 5.2.7.
- [Commits](https://github.com/django/django/compare/5.1.13...5.2.7)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index cd3888c7b..7ffbe0e42 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -18,11 +18,11 @@
     "default": {
         "asgiref": {
             "hashes": [
-                "sha256:0b61526596219d70396548fc003635056856dba5d0d086f86476f10b33c75960",
-                "sha256:a0249afacb66688ef258ffe503528360443e2b9a8d8c4581b6ebefa58c841ef1"
+                "sha256:aef8a81283a34d0ab31630c9b7dfe70c812c95eba78171367ca8745e88124734",
+                "sha256:d89f2d8cd8b56dada7d52fa7dc8075baa08fb836560710d38c292a7a3f78c04e"
             ],
             "markers": "python_version >= '3.9'",
-            "version": "==3.9.2"
+            "version": "==3.10.0"
         },
         "dj-database-url": {
             "hashes": [
@@ -34,12 +34,12 @@
         },
         "django": {
             "hashes": [
-                "sha256:06f257f79dc4c17f3f9e23b106a4c5ed1335abecbe731e83c598c941d14fbeed",
-                "sha256:543ff21679f15e80edfc01fe7ea35f8291b6d4ea589433882913626a7c1cf929"
+                "sha256:59a13a6515f787dec9d97a0438cd2efac78c8aca1c80025244b0fe507fe0754b",
+                "sha256:e0f6f12e2551b1716a95a63a1366ca91bbcd7be059862c1b18f989b1da356cdd"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.1.13"
+            "version": "==5.2.7"
         },
         "djangorestframework": {
             "hashes": [

From efb024eec1c752fb3a424fc37afa3dc7bdff7b5d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 21:23:35 +0000
Subject: [PATCH 011/427] chore(deps): bump whitenoise in
 /tests/apps/dockerfile-release

Bumps [whitenoise](https://github.com/evansd/whitenoise) from 6.2.0 to 6.11.0.
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](https://github.com/evansd/whitenoise/compare/6.2.0...6.11.0)

---
updated-dependencies:
- dependency-name: whitenoise
  dependency-version: 6.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index cd3888c7b..76e766480 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -170,11 +170,12 @@
         },
         "whitenoise": {
             "hashes": [
-                "sha256:8e9c600a5c18bd17655ef668ad55b5edf6c24ce9bdca5bf607649ca4b1e8e2c2",
-                "sha256:8fa943c6d4cd9e27673b70c21a07b0aa120873901e099cd46cab40f7cc96d567"
+                "sha256:0f5bfce6061ae6611cd9396a8231e088722e4fc67bc13a111be74c738d99375f",
+                "sha256:b2aeb45950597236f53b5342b3121c5de69c8da0109362aee506ce88e022d258"
             ],
             "index": "pypi",
-            "version": "==6.2.0"
+            "markers": "python_version >= '3.9'",
+            "version": "==6.11.0"
         }
     },
     "develop": {}

From 859791a18ecdeba079f15700435ef1b61d468a17 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 21:23:51 +0000
Subject: [PATCH 012/427] chore(deps): bump djangorestframework in
 /tests/apps/dockerfile-release

Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.15.2 to 3.16.1.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](https://github.com/encode/django-rest-framework/compare/3.15.2...3.16.1)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index cd3888c7b..bc1009ac1 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -18,11 +18,11 @@
     "default": {
         "asgiref": {
             "hashes": [
-                "sha256:0b61526596219d70396548fc003635056856dba5d0d086f86476f10b33c75960",
-                "sha256:a0249afacb66688ef258ffe503528360443e2b9a8d8c4581b6ebefa58c841ef1"
+                "sha256:aef8a81283a34d0ab31630c9b7dfe70c812c95eba78171367ca8745e88124734",
+                "sha256:d89f2d8cd8b56dada7d52fa7dc8075baa08fb836560710d38c292a7a3f78c04e"
             ],
             "markers": "python_version >= '3.9'",
-            "version": "==3.9.2"
+            "version": "==3.10.0"
         },
         "dj-database-url": {
             "hashes": [
@@ -34,21 +34,21 @@
         },
         "django": {
             "hashes": [
-                "sha256:06f257f79dc4c17f3f9e23b106a4c5ed1335abecbe731e83c598c941d14fbeed",
-                "sha256:543ff21679f15e80edfc01fe7ea35f8291b6d4ea589433882913626a7c1cf929"
+                "sha256:59a13a6515f787dec9d97a0438cd2efac78c8aca1c80025244b0fe507fe0754b",
+                "sha256:e0f6f12e2551b1716a95a63a1366ca91bbcd7be059862c1b18f989b1da356cdd"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.1.13"
+            "version": "==5.2.7"
         },
         "djangorestframework": {
             "hashes": [
-                "sha256:2b8871b062ba1aefc2de01f773875441a961fefbf79f5eed1e32b2f096944b20",
-                "sha256:36fe88cd2d6c6bec23dca9804bab2ba5517a8bb9d8f47ebc68981b56840107ad"
+                "sha256:166809528b1aced0a17dc66c24492af18049f2c9420dbd0be29422029cfc3ff7",
+                "sha256:33a59f47fb9c85ede792cbf88bde71893bcda0667bc573f784649521f1102cec"
             ],
             "index": "pypi",
-            "markers": "python_version >= '3.8'",
-            "version": "==3.15.2"
+            "markers": "python_version >= '3.9'",
+            "version": "==3.16.1"
         },
         "gunicorn": {
             "hashes": [

From 143094590a871c101741c2d95b656fcca4ba7e53 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 21:24:04 +0000
Subject: [PATCH 013/427] chore(deps): bump psycopg2-binary in
 /tests/apps/dockerfile-release

Bumps [psycopg2-binary](https://github.com/psycopg/psycopg2) from 2.9.5 to 2.9.11.
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](https://github.com/psycopg/psycopg2/commits/2.9.11)

---
updated-dependencies:
- dependency-name: psycopg2-binary
  dependency-version: 2.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 129 +++++++++------------
 1 file changed, 57 insertions(+), 72 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index cd3888c7b..90c84c93b 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -69,80 +69,65 @@
         },
         "psycopg2-binary": {
             "hashes": [
-                "sha256:00475004e5ed3e3bf5e056d66e5dcdf41a0dc62efcd57997acd9135c40a08a50",
-                "sha256:01ad49d68dd8c5362e4bfb4158f2896dc6e0c02e87b8a3770fc003459f1a4425",
-                "sha256:024030b13bdcbd53d8a93891a2cf07719715724fc9fee40243f3bd78b4264b8f",
-                "sha256:02551647542f2bf89073d129c73c05a25c372fc0a49aa50e0de65c3c143d8bd0",
-                "sha256:043a9fd45a03858ff72364b4b75090679bd875ee44df9c0613dc862ca6b98460",
-                "sha256:05b3d479425e047c848b9782cd7aac9c6727ce23181eb9647baf64ffdfc3da41",
-                "sha256:0775d6252ccb22b15da3b5d7adbbf8cfe284916b14b6dc0ff503a23edb01ee85",
-                "sha256:1764546ffeaed4f9428707be61d68972eb5ede81239b46a45843e0071104d0dd",
-                "sha256:1e491e6489a6cb1d079df8eaa15957c277fdedb102b6a68cfbf40c4994412fd0",
-                "sha256:212757ffcecb3e1a5338d4e6761bf9c04f750e7d027117e74aa3cd8a75bb6fbd",
-                "sha256:215d6bf7e66732a514f47614f828d8c0aaac9a648c46a831955cb103473c7147",
-                "sha256:25382c7d174c679ce6927c16b6fbb68b10e56ee44b1acb40671e02d29f2fce7c",
-                "sha256:2abccab84d057723d2ca8f99ff7b619285d40da6814d50366f61f0fc385c3903",
-                "sha256:2d964eb24c8b021623df1c93c626671420c6efadbdb8655cb2bd5e0c6fa422ba",
-                "sha256:2ec46ed947801652c9643e0b1dc334cfb2781232e375ba97312c2fc256597632",
-                "sha256:2ef892cabdccefe577088a79580301f09f2a713eb239f4f9f62b2b29cafb0577",
-                "sha256:33e632d0885b95a8b97165899006c40e9ecdc634a529dca7b991eb7de4ece41c",
-                "sha256:3520d7af1ebc838cc6084a3281145d5cd5bdd43fdef139e6db5af01b92596cb7",
-                "sha256:3d790f84201c3698d1bfb404c917f36e40531577a6dda02e45ba29b64d539867",
-                "sha256:3fc33295cfccad697a97a76dec3f1e94ad848b7b163c3228c1636977966b51e2",
-                "sha256:422e3d43b47ac20141bc84b3d342eead8d8099a62881a501e97d15f6addabfe9",
-                "sha256:426c2ae999135d64e6a18849a7d1ad0e1bd007277e4a8f4752eaa40a96b550ff",
-                "sha256:46512486be6fbceef51d7660dec017394ba3e170299d1dc30928cbedebbf103a",
-                "sha256:46850a640df62ae940e34a163f72e26aca1f88e2da79148e1862faaac985c302",
-                "sha256:484405b883630f3e74ed32041a87456c5e0e63a8e3429aa93e8714c366d62bd1",
-                "sha256:4e7904d1920c0c89105c0517dc7e3f5c20fb4e56ba9cdef13048db76947f1d79",
-                "sha256:56b2957a145f816726b109ee3d4e6822c23f919a7d91af5a94593723ed667835",
-                "sha256:5c6527c8efa5226a9e787507652dd5ba97b62d29b53c371a85cd13f957fe4d42",
-                "sha256:5cbc554ba47ecca8cd3396ddaca85e1ecfe3e48dd57dc5e415e59551affe568e",
-                "sha256:5d28ecdf191db558d0c07d0f16524ee9d67896edf2b7990eea800abeb23ebd61",
-                "sha256:5fc447058d083b8c6ac076fc26b446d44f0145308465d745fba93a28c14c9e32",
-                "sha256:63e318dbe52709ed10d516a356f22a635e07a2e34c68145484ed96a19b0c4c68",
-                "sha256:68d81a2fe184030aa0c5c11e518292e15d342a667184d91e30644c9d533e53e1",
-                "sha256:6e63814ec71db9bdb42905c925639f319c80e7909fb76c3b84edc79dadef8d60",
-                "sha256:6f8a9bcab7b6db2e3dbf65b214dfc795b4c6b3bb3af922901b6a67f7cb47d5f8",
-                "sha256:70831e03bd53702c941da1a1ad36c17d825a24fbb26857b40913d58df82ec18b",
-                "sha256:74eddec4537ab1f701a1647214734bc52cee2794df748f6ae5908e00771f180a",
-                "sha256:7b3751857da3e224f5629400736a7b11e940b5da5f95fa631d86219a1beaafec",
-                "sha256:7cf1d44e710ca3a9ce952bda2855830fe9f9017ed6259e01fcd71ea6287565f5",
-                "sha256:7d07f552d1e412f4b4e64ce386d4c777a41da3b33f7098b6219012ba534fb2c2",
-                "sha256:7d88db096fa19d94f433420eaaf9f3c45382da2dd014b93e4bf3215639047c16",
-                "sha256:7ee3095d02d6f38bd7d9a5358fcc9ea78fcdb7176921528dd709cc63f40184f5",
-                "sha256:902844f9c4fb19b17dfa84d9e2ca053d4a4ba265723d62ea5c9c26b38e0aa1e6",
-                "sha256:937880290775033a743f4836aa253087b85e62784b63fd099ee725d567a48aa1",
-                "sha256:95076399ec3b27a8f7fa1cc9a83417b1c920d55cf7a97f718a94efbb96c7f503",
-                "sha256:9c38d3869238e9d3409239bc05bc27d6b7c99c2a460ea337d2814b35fb4fea1b",
-                "sha256:9e32cedc389bcb76d9f24ea8a012b3cb8385ee362ea437e1d012ffaed106c17d",
-                "sha256:9ffdc51001136b699f9563b1c74cc1f8c07f66ef7219beb6417a4c8aaa896c28",
-                "sha256:a0adef094c49f242122bb145c3c8af442070dc0e4312db17e49058c1702606d4",
-                "sha256:a36a0e791805aa136e9cbd0ffa040d09adec8610453ee8a753f23481a0057af5",
-                "sha256:a7e518a0911c50f60313cb9e74a169a65b5d293770db4770ebf004245f24b5c5",
-                "sha256:af0516e1711995cb08dc19bbd05bec7dbdebf4185f68870595156718d237df3e",
-                "sha256:b8104f709590fff72af801e916817560dbe1698028cd0afe5a52d75ceb1fce5f",
-                "sha256:b911dfb727e247340d36ae20c4b9259e4a64013ab9888ccb3cbba69b77fd9636",
-                "sha256:b9a794cef1d9c1772b94a72eec6da144c18e18041d294a9ab47669bc77a80c1d",
-                "sha256:b9c33d4aef08dfecbd1736ceab8b7b3c4358bf10a0121483e5cd60d3d308cc64",
-                "sha256:b9d38a4656e4e715d637abdf7296e98d6267df0cc0a8e9a016f8ba07e4aa3eeb",
-                "sha256:bcda1c84a1c533c528356da5490d464a139b6e84eb77cc0b432e38c5c6dd7882",
-                "sha256:bef7e3f9dc6f0c13afdd671008534be5744e0e682fb851584c8c3a025ec09720",
-                "sha256:c15ba5982c177bc4b23a7940c7e4394197e2d6a424a2d282e7c236b66da6d896",
-                "sha256:c5254cbd4f4855e11cebf678c1a848a3042d455a22a4ce61349c36aafd4c2267",
-                "sha256:c5682a45df7d9642eff590abc73157c887a68f016df0a8ad722dcc0f888f56d7",
-                "sha256:c5e65c6ac0ae4bf5bef1667029f81010b6017795dcb817ba5c7b8a8d61fab76f",
-                "sha256:d4c7b3a31502184e856df1f7bbb2c3735a05a8ce0ade34c5277e1577738a5c91",
-                "sha256:d892bfa1d023c3781a3cab8dd5af76b626c483484d782e8bd047c180db590e4c",
-                "sha256:dbc332beaf8492b5731229a881807cd7b91b50dbbbaf7fe2faf46942eda64a24",
-                "sha256:dc85b3777068ed30aff8242be2813038a929f2084f69e43ef869daddae50f6ee",
-                "sha256:e59137cdb970249ae60be2a49774c6dfb015bd0403f05af1fe61862e9626642d",
-                "sha256:e67b3c26e9b6d37b370c83aa790bbc121775c57bfb096c2e77eacca25fd0233b",
-                "sha256:e72c91bda9880f097c8aa3601a2c0de6c708763ba8128006151f496ca9065935",
-                "sha256:f95b8aca2703d6a30249f83f4fe6a9abf2e627aa892a5caaab2267d56be7ab69"
+                "sha256:04195548662fa544626c8ea0f06561eb6203f1984ba5b4562764fbeb4c3d14b1",
+                "sha256:0e8480afd62362d0a6a27dd09e4ca2def6fa50ed3a4e7c09165266106b2ffa10",
+                "sha256:20e7fb94e20b03dcc783f76c0865f9da39559dcc0c28dd1a3fce0d01902a6b9c",
+                "sha256:2c226ef95eb2250974bf6fa7a842082b31f68385c4f3268370e3f3870e7859ee",
+                "sha256:2e164359396576a3cc701ba8af4751ae68a07235d7a380c631184a611220d9a4",
+                "sha256:304fd7b7f97eef30e91b8f7e720b3db75fee010b520e434ea35ed1ff22501d03",
+                "sha256:31b32c457a6025e74d233957cc9736742ac5a6cb196c6b68499f6bb51390bd6a",
+                "sha256:366df99e710a2acd90efed3764bb1e28df6c675d33a7fb40df9b7281694432ee",
+                "sha256:37d8412565a7267f7d79e29ab66876e55cb5e8e7b3bbf94f8206f6795f8f7e7e",
+                "sha256:4012c9c954dfaccd28f94e84ab9f94e12df76b4afb22331b1f0d3154893a6316",
+                "sha256:41360b01c140c2a03d346cec3280cf8a71aa07d94f3b1509fa0161c366af66b4",
+                "sha256:44fc5c2b8fa871ce7f0023f619f1349a0aa03a0857f2c96fbc01c657dcbbdb49",
+                "sha256:47f212c1d3be608a12937cc131bd85502954398aaa1320cb4c14421a0ffccf4c",
+                "sha256:4bdab48575b6f870f465b397c38f1b415520e9879fdf10a53ee4f49dcbdf8a21",
+                "sha256:4dca1f356a67ecb68c81a7bc7809f1569ad9e152ce7fd02c2f2036862ca9f66b",
+                "sha256:5c6ff3335ce08c75afaed19e08699e8aacf95d4a260b495a4a8545244fe2ceb3",
+                "sha256:5f3f2732cf504a1aa9e9609d02f79bea1067d99edf844ab92c247bbca143303b",
+                "sha256:62b6d93d7c0b61a1dd6197d208ab613eb7dcfdcca0a49c42ceb082257991de9d",
+                "sha256:691c807d94aecfbc76a14e1408847d59ff5b5906a04a23e12a89007672b9e819",
+                "sha256:763c93ef1df3da6d1a90f86ea7f3f806dc06b21c198fa87c3c25504abec9404a",
+                "sha256:875039274f8a2361e5207857899706da840768e2a775bf8c65e82f60b197df02",
+                "sha256:8b81627b691f29c4c30a8f322546ad039c40c328373b11dff7490a3e1b517855",
+                "sha256:8c55b385daa2f92cb64b12ec4536c66954ac53654c7f15a203578da4e78105c0",
+                "sha256:91537a8df2bde69b1c1db01d6d944c831ca793952e4f57892600e96cee95f2cd",
+                "sha256:92e3b669236327083a2e33ccfa0d320dd01b9803b3e14dd986a4fc54aa00f4e1",
+                "sha256:9b52a3f9bb540a3e4ec0f6ba6d31339727b2950c9772850d6545b7eae0b9d7c5",
+                "sha256:9bd81e64e8de111237737b29d68039b9c813bdf520156af36d26819c9a979e5f",
+                "sha256:9c55460033867b4622cda1b6872edf445809535144152e5d14941ef591980edf",
+                "sha256:9d3a9edcfbe77a3ed4bc72836d466dfce4174beb79eda79ea155cc77237ed9e8",
+                "sha256:a28d8c01a7b27a1e3265b11250ba7557e5f72b5ee9e5f3a2fa8d2949c29bf5d2",
+                "sha256:a6c0e4262e089516603a09474ee13eabf09cb65c332277e39af68f6233911087",
+                "sha256:ab8905b5dcb05bf3fb22e0cf90e10f469563486ffb6a96569e51f897c750a76a",
+                "sha256:b31e90fdd0f968c2de3b26ab014314fe814225b6c324f770952f7d38abf17e3c",
+                "sha256:b33fabeb1fde21180479b2d4667e994de7bbf0eec22832ba5d9b5e4cf65b6c6d",
+                "sha256:b6aed9e096bf63f9e75edf2581aa9a7e7186d97ab5c177aa6c87797cd591236c",
+                "sha256:b8fb3db325435d34235b044b199e56cdf9ff41223a4b9752e8576465170bb38c",
+                "sha256:ba34475ceb08cccbdd98f6b46916917ae6eeb92b5ae111df10b544c3a4621dc4",
+                "sha256:be9b840ac0525a283a96b556616f5b4820e0526addb8dcf6525a0fa162730be4",
+                "sha256:bf940cd7e7fec19181fdbc29d76911741153d51cab52e5c21165f3262125685e",
+                "sha256:c0377174bf1dd416993d16edc15357f6eb17ac998244cca19bc67cdc0e2e5766",
+                "sha256:c3cb3a676873d7506825221045bd70e0427c905b9c8ee8d6acd70cfcbd6e576d",
+                "sha256:c47676e5b485393f069b4d7a811267d3168ce46f988fa602658b8bb901e9e64d",
+                "sha256:c665f01ec8ab273a61c62beeb8cce3014c214429ced8a308ca1fc410ecac3a39",
+                "sha256:cffe9d7697ae7456649617e8bb8d7a45afb71cd13f7ab22af3e5c61f04840908",
+                "sha256:d57c9c387660b8893093459738b6abddbb30a7eab058b77b0d0d1c7d521ddfd7",
+                "sha256:d6fe6b47d0b42ce1c9f1fa3e35bb365011ca22e39db37074458f27921dca40f2",
+                "sha256:db4fd476874ccfdbb630a54426964959e58da4c61c9feba73e6094d51303d7d8",
+                "sha256:e0deeb03da539fa3577fcb0b3f2554a97f7e5477c246098dbb18091a4a01c16f",
+                "sha256:ebb415404821b6d1c47353ebe9c8645967a5235e6d88f914147e7fd411419e6f",
+                "sha256:ef7a6beb4beaa62f88592ccc65df20328029d721db309cb3250b0aae0fa146c3",
+                "sha256:efff12b432179443f54e230fdf60de1f6cc726b6c832db8701227d089310e8aa",
+                "sha256:f07c9c4a5093258a03b28fab9b4f151aa376989e7f35f855088234e656ee6a94",
+                "sha256:f090b7ddd13ca842ebfe301cd587a76a4cf0913b1e429eb92c1be5dbeb1a19bc",
+                "sha256:fa0f693d3c68ae925966f0b14b8edda71696608039f4ed61b1fe9ffa468d16db",
+                "sha256:fcf21be3ce5f5659daefd2b3b3b6e4727b028221ddc94e6c1523425579664747"
             ],
             "index": "pypi",
-            "version": "==2.9.5"
+            "markers": "python_version >= '3.9'",
+            "version": "==2.9.11"
         },
         "pytz": {
             "hashes": [

From 51a81a616171a5bc58de669de32cb4a9bfb0ef10 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Oct 2025 21:24:19 +0000
Subject: [PATCH 014/427] chore(deps): bump dj-database-url in
 /tests/apps/dockerfile-release

Bumps [dj-database-url](https://github.com/jazzband/dj-database-url) from 1.0.0 to 3.0.1.
- [Release notes](https://github.com/jazzband/dj-database-url/releases)
- [Changelog](https://github.com/jazzband/dj-database-url/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jazzband/dj-database-url/compare/v1.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: dj-database-url
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index cd3888c7b..49d1fd160 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -18,28 +18,28 @@
     "default": {
         "asgiref": {
             "hashes": [
-                "sha256:0b61526596219d70396548fc003635056856dba5d0d086f86476f10b33c75960",
-                "sha256:a0249afacb66688ef258ffe503528360443e2b9a8d8c4581b6ebefa58c841ef1"
+                "sha256:aef8a81283a34d0ab31630c9b7dfe70c812c95eba78171367ca8745e88124734",
+                "sha256:d89f2d8cd8b56dada7d52fa7dc8075baa08fb836560710d38c292a7a3f78c04e"
             ],
             "markers": "python_version >= '3.9'",
-            "version": "==3.9.2"
+            "version": "==3.10.0"
         },
         "dj-database-url": {
             "hashes": [
-                "sha256:ccf3e8718f75ddd147a1e212fca88eecdaa721759ee48e38b485481c77bca3dc",
-                "sha256:cd354a3b7a9136d78d64c17b2aec369e2ae5616fbca6bfbe435ef15bb372ce39"
+                "sha256:43950018e1eeea486bf11136384aec0fe55b29fe6fd8a44553231b85661d9383",
+                "sha256:8994961efb888fc6bf8c41550870c91f6f7691ca751888ebaa71442b7f84eff8"
             ],
             "index": "pypi",
-            "version": "==1.0.0"
+            "version": "==3.0.1"
         },
         "django": {
             "hashes": [
-                "sha256:06f257f79dc4c17f3f9e23b106a4c5ed1335abecbe731e83c598c941d14fbeed",
-                "sha256:543ff21679f15e80edfc01fe7ea35f8291b6d4ea589433882913626a7c1cf929"
+                "sha256:59a13a6515f787dec9d97a0438cd2efac78c8aca1c80025244b0fe507fe0754b",
+                "sha256:e0f6f12e2551b1716a95a63a1366ca91bbcd7be059862c1b18f989b1da356cdd"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.1.13"
+            "version": "==5.2.7"
         },
         "djangorestframework": {
             "hashes": [

From 5d4378c5852486bbb2804d2720a6795daeac9dad Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 15 Oct 2025 00:19:03 -0400
Subject: [PATCH 015/427] feat: add ability to disable letsencrypt for a given
 application or globally

If disabled globally, it can be re-enabled on a per-app basis by setting the `letsencrypt-server` property to `production` or `staging`.
---
 docs/deployment/schedulers/k3s.md | 12 ++++++++++++
 plugins/scheduler-k3s/triggers.go | 26 ++++++++++++++------------
 2 files changed, 26 insertions(+), 12 deletions(-)

diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index 2846949e9..af5ce1e66 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -213,6 +213,18 @@ The default value may be set by passing an empty value for the option.
 dokku scheduler-k3s:set --global letsencrypt-server staging
 ```
 
+Letsencrypt can be completely disabled for a given appby setting the `letsencrypt-server` to `false`
+
+```shell
+dokku scheduler-k3s:set node-js-app letsencrypt-server false
+```
+
+The server can also be disabled globally, and then conditionally enabled on a per-app basis:
+
+```shell
+dokku scheduler-k3s:set --global letsencrypt-server false
+```
+
 ### Customizing Annotations and Labels
 
 > [!NOTE]
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 298ee7fe2..b89aa017c 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -226,22 +226,24 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 		return fmt.Errorf("Error loading environment for deployment: %w", err)
 	}
 
-	issuerName := "letsencrypt-stag"
 	server := getComputedLetsencryptServer(appName)
-	if server == "prod" || server == "production" {
-		issuerName = "letsencrypt-prod"
-	} else if server != "stag" && server != "staging" {
-		return fmt.Errorf("Invalid letsencrypt server config: %s", server)
-	}
-
-	tlsEnabled := false
 	letsencryptEmailStag := getGlobalLetsencryptEmailStag()
 	letsencryptEmailProd := getGlobalLetsencryptEmailProd()
-	if issuerName == "letsencrypt-stag" {
-		tlsEnabled = letsencryptEmailStag != ""
-	}
-	if issuerName == "letsencrypt-prod" {
+	tlsEnabled := false
+
+	issuerName := ""
+	switch server {
+	case "prod", "production":
+		issuerName = "letsencrypt-prod"
 		tlsEnabled = letsencryptEmailProd != ""
+	case "stag", "staging":
+		issuerName = "letsencrypt-stag"
+		tlsEnabled = letsencryptEmailStag != ""
+	case "false":
+		issuerName = ""
+		tlsEnabled = false
+	default:
+		return fmt.Errorf("Invalid letsencrypt server config: %s", server)
 	}
 
 	chartDir, err := os.MkdirTemp("", "dokku-chart-")

From 107e4e911b02af34cf65b82de91f38f7987fef87 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 15 Oct 2025 13:07:52 +0000
Subject: [PATCH 016/427] chore(deps): bump mkdocs-material from 9.6.21 to
 9.6.22 in /docs/_build

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.6.21 to 9.6.22.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.21...9.6.22)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.6.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index a4e351803..f2c48f0c2 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -8,7 +8,7 @@ MarkupSafe==3.0.3
 mergedeep==1.3.4
 mkdocs==1.6.1
 mkdocs-exclude==1.0.2
-mkdocs-material==9.6.21
+mkdocs-material==9.6.22
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2

From 3dde9853ca3744c50234c3de6c5c696399a8232b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 15 Oct 2025 11:14:14 -0400
Subject: [PATCH 017/427] Update docs/deployment/schedulers/k3s.md

Co-authored-by: othercorey <corey.taylor.fl@gmail.com>
---
 docs/deployment/schedulers/k3s.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index af5ce1e66..3f05ef279 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -213,7 +213,7 @@ The default value may be set by passing an empty value for the option.
 dokku scheduler-k3s:set --global letsencrypt-server staging
 ```
 
-Letsencrypt can be completely disabled for a given appby setting the `letsencrypt-server` to `false`
+Letsencrypt can be completely disabled for a given app by setting the `letsencrypt-server` to `false`
 
 ```shell
 dokku scheduler-k3s:set node-js-app letsencrypt-server false

From 85afbe51bc3fa4d4a2672a4d26bcb698be1294f8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Oct 2025 13:13:08 +0000
Subject: [PATCH 018/427] chore(deps): bump
 github.com/cert-manager/cert-manager

Bumps [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](https://github.com/cert-manager/cert-manager/compare/v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 4 ++--
 plugins/scheduler-k3s/go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index e24e8d1ad..0e66249a5 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -4,7 +4,7 @@ go 1.25.1
 
 require (
 	github.com/Masterminds/semver/v3 v3.4.0
-	github.com/cert-manager/cert-manager v1.19.0
+	github.com/cert-manager/cert-manager v1.19.1
 	github.com/dokku/dokku/plugins/app-json v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/common v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/config v0.0.0-20250618161309-8d0c35f1333c
@@ -167,7 +167,7 @@ require (
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 // indirect
 	oras.land/oras-go/v2 v2.6.0 // indirect
-	sigs.k8s.io/controller-runtime v0.22.2 // indirect
+	sigs.k8s.io/controller-runtime v0.22.3 // indirect
 	sigs.k8s.io/gateway-api v1.4.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/kustomize/kyaml v0.20.1 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index e11e7459b..ea64f578e 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -36,8 +36,8 @@ github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK3
 github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
 github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
-github.com/cert-manager/cert-manager v1.19.0 h1:pPKtK06zPriliwq7B12xa7DGKbc4SvnfOjE0BXaAspk=
-github.com/cert-manager/cert-manager v1.19.0/go.mod h1:7VBp/ihp5Xgz/ZJuGy1fNIWbDouQKBonvEyWoJLuhmA=
+github.com/cert-manager/cert-manager v1.19.1 h1:Txh8L/nLWTDcb7ZnXuXbTe15BxQnLbLirXmbNk0fGgY=
+github.com/cert-manager/cert-manager v1.19.1/go.mod h1:8Ps1VXCQRGKT8zNvLQlhDK1gFKWmYKdIPQFmvTS2JeA=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chai2010/gettext-go v1.0.3 h1:9liNh8t+u26xl5ddmWLmsOsdNLwkdRTg5AG+JnTiM80=
@@ -574,8 +574,8 @@ mvdan.cc/sh/v3 v3.12.0 h1:ejKUR7ONP5bb+UGHGEG/k9V5+pRVIyD+LsZz7o8KHrI=
 mvdan.cc/sh/v3 v3.12.0/go.mod h1:Se6Cj17eYSn+sNooLZiEUnNNmNxg0imoYlTu4CyaGyg=
 oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc=
 oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o=
-sigs.k8s.io/controller-runtime v0.22.2 h1:cK2l8BGWsSWkXz09tcS4rJh95iOLney5eawcK5A33r4=
-sigs.k8s.io/controller-runtime v0.22.2/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8=
+sigs.k8s.io/controller-runtime v0.22.3 h1:I7mfqz/a/WdmDCEnXmSPm8/b/yRTy6JsKKENTijTq8Y=
+sigs.k8s.io/controller-runtime v0.22.3/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8=
 sigs.k8s.io/gateway-api v1.4.0 h1:ZwlNM6zOHq0h3WUX2gfByPs2yAEsy/EenYJB78jpQfQ=
 sigs.k8s.io/gateway-api v1.4.0/go.mod h1:AR5RSqciWP98OPckEjOjh2XJhAe2Na4LHyXD2FUY7Qk=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=

From 929b8444e41084541d7f439f4eaa4f7ce6d13100 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <info@tashows.com>
Date: Wed, 1 Oct 2025 00:27:08 +0300
Subject: [PATCH 019/427] Add helper functions isBareGitRepo and
 checkoutBareGitRepo

---
 plugins/buildpacks/functions.go | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/plugins/buildpacks/functions.go b/plugins/buildpacks/functions.go
index f3545233e..0252e239e 100644
--- a/plugins/buildpacks/functions.go
+++ b/plugins/buildpacks/functions.go
@@ -63,3 +63,31 @@ func validBuildpackURL(buildpack string) (string, error) {
 
 	return buildpack, fmt.Errorf("Invalid buildpack specified: %v", buildpack)
 }
+
+func isBareGitRepo(directory string) bool {
+	headFile := filepath.Join(directory, "HEAD")
+	objectsDir := filepath.Join(directory, "objects")
+	if common.FileExists(headFile) && common.DirectoryExists(objectsDir) {
+		return true
+	}
+	return false
+}
+
+func checkoutBareGitRepo(sourceWorkDir string) (string, error) {
+	tmpdir, err := os.MkdirTemp("", "bare-git-checkout")
+	if err != nil {
+		return "", fmt.Errorf("Unable to create temporary directory: %s", err.Error())
+	}
+
+	result, err := common.CallExecCommand(common.ExecCommandInput{
+		Command: "git",
+		Args:    []string{"--git-dir=" + sourceWorkDir, "--work-tree=" + tmpdir, "checkout", "-f"},
+	})
+
+	if err != nil {
+		os.RemoveAll(tmpdir)
+		return "", fmt.Errorf("Unable to checkout bare git repository: %s", result.StderrContents())
+	}
+
+	return tmpdir, nil
+}

From d440b4614d02c5455a9c940e13f75bf80bf2ec66 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <info@tashows.com>
Date: Wed, 1 Oct 2025 00:30:09 +0300
Subject: [PATCH 020/427] Define and register 'detect' subcommand

---
 plugins/buildpacks/Makefile                   |  2 +-
 .../buildpacks/src/subcommands/subcommands.go |  5 ++
 plugins/buildpacks/subcommands.go             | 46 +++++++++++++++++++
 3 files changed, 52 insertions(+), 1 deletion(-)

diff --git a/plugins/buildpacks/Makefile b/plugins/buildpacks/Makefile
index aff09a27a..70ed37a5f 100644
--- a/plugins/buildpacks/Makefile
+++ b/plugins/buildpacks/Makefile
@@ -1,4 +1,4 @@
-SUBCOMMANDS = subcommands/add subcommands/clear subcommands/list subcommands/remove subcommands/report subcommands/set subcommands/set-property
+SUBCOMMANDS = subcommands/add subcommands/clear subcommands/detect subcommands/list subcommands/remove subcommands/report subcommands/set subcommands/set-property
 TRIGGERS = triggers/buildpack-stack-name triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-delete triggers/post-extract triggers/report
 BUILD = commands subcommands triggers
 PLUGIN_NAME = buildpacks
diff --git a/plugins/buildpacks/src/subcommands/subcommands.go b/plugins/buildpacks/src/subcommands/subcommands.go
index f245238f7..d1c596bcc 100644
--- a/plugins/buildpacks/src/subcommands/subcommands.go
+++ b/plugins/buildpacks/src/subcommands/subcommands.go
@@ -30,6 +30,11 @@ func main() {
 		args.Parse(os.Args[2:])
 		appName := args.Arg(0)
 		err = buildpacks.CommandClear(appName)
+	case "detect":
+		args := flag.NewFlagSet("buildpacks:detect", flag.ExitOnError)
+		args.Parse(os.Args[2:])
+		appName := args.Arg(0)
+		err = buildpacks.CommandDetect(appName)
 	case "list":
 		args := flag.NewFlagSet("buildpacks:list", flag.ExitOnError)
 		args.Parse(os.Args[2:])
diff --git a/plugins/buildpacks/subcommands.go b/plugins/buildpacks/subcommands.go
index 329ed6b9f..4674eb4e8 100644
--- a/plugins/buildpacks/subcommands.go
+++ b/plugins/buildpacks/subcommands.go
@@ -3,6 +3,7 @@ package buildpacks
 import (
 	"errors"
 	"fmt"
+	"os"
 
 	"github.com/dokku/dokku/plugins/common"
 )
@@ -30,6 +31,51 @@ func CommandClear(appName string) error {
 	return common.PropertyDelete("buildpacks", appName, "buildpacks")
 }
 
+// CommandDetect implements buildpacks:detect
+func CommandDetect(appName string) error {
+	if err := common.VerifyAppName(appName); err != nil {
+		return err
+	}
+
+	buildPath := common.AppRoot(appName)
+	if !common.DirectoryExists(buildPath) {
+		return fmt.Errorf("App %s does not exist", appName)
+	}
+
+	workDir := buildPath
+	if isBareGitRepo(buildPath) {
+		checkedOutPath, err := checkoutBareGitRepo(buildPath)
+        if err != nil {
+            return err
+        }
+		workDir = checkedOutPath
+		defer func() {
+			if err := os.RemoveAll(checkedOutPath); err != nil {
+				common.LogWarn(fmt.Sprintf("Failed to remove temporary directory %s: %v", checkedOutPath, err))
+			}
+		}()
+	}
+
+	appRoot := workDir
+
+	dockerArgs := []string{
+		"run", "--rm",
+		"-v", fmt.Sprintf("%s:/tmp/app", appRoot),
+		"gliderlabs/herokuish", "/bin/herokuish", "buildpack", "detect", "/tmp/app",
+	}
+
+	result, err := common.CallExecCommand(common.ExecCommandInput{
+		Command: common.DockerBin(),
+		Args:    dockerArgs,
+	})
+	if err != nil {
+		return fmt.Errorf("Buildpack detection failed: %s", result.StderrContents())
+	}
+
+	common.LogVerbose(fmt.Sprintf("%s", result.StdoutContents()))
+	return nil
+}
+
 // CommandList implements buildpacks:list
 func CommandList(appName string) (err error) {
 	if err := common.VerifyAppName(appName); err != nil {

From 0c79a2c2fc5ac8d6ea956ad51ddf50f59388c3d8 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <info@tashows.com>
Date: Wed, 1 Oct 2025 00:30:43 +0300
Subject: [PATCH 021/427] Add detect command in buildpacks helpContent

---
 plugins/buildpacks/src/commands/commands.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/plugins/buildpacks/src/commands/commands.go b/plugins/buildpacks/src/commands/commands.go
index ecbacbc38..c2238a5a4 100644
--- a/plugins/buildpacks/src/commands/commands.go
+++ b/plugins/buildpacks/src/commands/commands.go
@@ -20,6 +20,7 @@ Additional commands:`
 	helpContent = `
     buildpacks:add [--index 1] <app> <buildpack>, Add new app buildpack while inserting into list of buildpacks if necessary
     buildpacks:clear <app>, Clear all buildpacks set on the app
+    buildpacks:detect <app>, Detect the buildpack for an app
     buildpacks:list <app>, List all buildpacks for an app
     buildpacks:remove <app> <buildpack>, Remove a buildpack set on the app
     buildpacks:report [<app>] [<flag>], Displays a buildpack report for one or more apps

From 4b0c8b3d59a4eab41e977fb2b37ba3c61ed6c26d Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <tas.o.s@hotmail.com>
Date: Wed, 1 Oct 2025 00:46:05 +0300
Subject: [PATCH 022/427] Refactor CommandDetect function

---
 plugins/buildpacks/subcommands.go | 21 +++++++--------------
 1 file changed, 7 insertions(+), 14 deletions(-)

diff --git a/plugins/buildpacks/subcommands.go b/plugins/buildpacks/subcommands.go
index 4674eb4e8..624a42bb1 100644
--- a/plugins/buildpacks/subcommands.go
+++ b/plugins/buildpacks/subcommands.go
@@ -37,30 +37,23 @@ func CommandDetect(appName string) error {
 		return err
 	}
 
-	buildPath := common.AppRoot(appName)
-	if !common.DirectoryExists(buildPath) {
-		return fmt.Errorf("App %s does not exist", appName)
-	}
-
-	workDir := buildPath
-	if isBareGitRepo(buildPath) {
-		checkedOutPath, err := checkoutBareGitRepo(buildPath)
+	workDir := common.AppRoot(appName)
+	if isBareGitRepo(workDir) {
+		checkedOutDir, err := checkoutBareGitRepo(workDir)
         if err != nil {
             return err
         }
-		workDir = checkedOutPath
+		workDir = checkedOutDir
 		defer func() {
-			if err := os.RemoveAll(checkedOutPath); err != nil {
-				common.LogWarn(fmt.Sprintf("Failed to remove temporary directory %s: %v", checkedOutPath, err))
+			if err := os.RemoveAll(checkedOutDir); err != nil {
+				common.LogWarn(fmt.Sprintf("Failed to remove temporary directory %s: %v", checkedOutDir, err))
 			}
 		}()
 	}
 
-	appRoot := workDir
-
 	dockerArgs := []string{
 		"run", "--rm",
-		"-v", fmt.Sprintf("%s:/tmp/app", appRoot),
+		"-v", fmt.Sprintf("%s:/tmp/app", workDir),
 		"gliderlabs/herokuish", "/bin/herokuish", "buildpack", "detect", "/tmp/app",
 	}
 

From 66894bc0c5fd7d5b3b2dedc71a03002d01aaf343 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <tas.o.s@hotmail.com>
Date: Thu, 16 Oct 2025 17:17:29 +0300
Subject: [PATCH 023/427] Remove redundant function isBareGitRepo

---
 plugins/buildpacks/functions.go   |  9 ---------
 plugins/buildpacks/subcommands.go | 22 ++++++++++------------
 2 files changed, 10 insertions(+), 21 deletions(-)

diff --git a/plugins/buildpacks/functions.go b/plugins/buildpacks/functions.go
index 0252e239e..1845efae8 100644
--- a/plugins/buildpacks/functions.go
+++ b/plugins/buildpacks/functions.go
@@ -64,15 +64,6 @@ func validBuildpackURL(buildpack string) (string, error) {
 	return buildpack, fmt.Errorf("Invalid buildpack specified: %v", buildpack)
 }
 
-func isBareGitRepo(directory string) bool {
-	headFile := filepath.Join(directory, "HEAD")
-	objectsDir := filepath.Join(directory, "objects")
-	if common.FileExists(headFile) && common.DirectoryExists(objectsDir) {
-		return true
-	}
-	return false
-}
-
 func checkoutBareGitRepo(sourceWorkDir string) (string, error) {
 	tmpdir, err := os.MkdirTemp("", "bare-git-checkout")
 	if err != nil {
diff --git a/plugins/buildpacks/subcommands.go b/plugins/buildpacks/subcommands.go
index 624a42bb1..64578012d 100644
--- a/plugins/buildpacks/subcommands.go
+++ b/plugins/buildpacks/subcommands.go
@@ -38,18 +38,16 @@ func CommandDetect(appName string) error {
 	}
 
 	workDir := common.AppRoot(appName)
-	if isBareGitRepo(workDir) {
-		checkedOutDir, err := checkoutBareGitRepo(workDir)
-        if err != nil {
-            return err
-        }
-		workDir = checkedOutDir
-		defer func() {
-			if err := os.RemoveAll(checkedOutDir); err != nil {
-				common.LogWarn(fmt.Sprintf("Failed to remove temporary directory %s: %v", checkedOutDir, err))
-			}
-		}()
-	}
+	checkedOutDir, err := checkoutBareGitRepo(workDir)
+    if err != nil {
+        return err
+    }
+	workDir = checkedOutDir
+	defer func() {
+		if err := os.RemoveAll(checkedOutDir); err != nil {
+			common.LogWarn(fmt.Sprintf("Failed to remove temporary directory %s: %v", checkedOutDir, err))
+		}
+	}()
 
 	dockerArgs := []string{
 		"run", "--rm",

From e234401178477e1243b9ef4002b9c11e0671c300 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <tas.o.s@hotmail.com>
Date: Thu, 16 Oct 2025 17:19:22 +0300
Subject: [PATCH 024/427] Cleanup output log in CommandDetect function

---
 plugins/buildpacks/subcommands.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/buildpacks/subcommands.go b/plugins/buildpacks/subcommands.go
index 64578012d..86255e628 100644
--- a/plugins/buildpacks/subcommands.go
+++ b/plugins/buildpacks/subcommands.go
@@ -63,7 +63,7 @@ func CommandDetect(appName string) error {
 		return fmt.Errorf("Buildpack detection failed: %s", result.StderrContents())
 	}
 
-	common.LogVerbose(fmt.Sprintf("%s", result.StdoutContents()))
+	common.LogVerbose(result.StdoutContents())
 	return nil
 }
 

From 65e0fb9037c998b3556467b2f03174e390ebc546 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <tas.o.s@hotmail.com>
Date: Thu, 16 Oct 2025 18:33:47 +0300
Subject: [PATCH 025/427] Detect buildpacks for specific branch (fall back to
 deploy-branch to be consistent with deployment behavior)

---
 plugins/buildpacks/functions.go                   | 14 ++++++++++++--
 plugins/buildpacks/src/commands/commands.go       |  2 +-
 plugins/buildpacks/src/subcommands/subcommands.go |  6 +++++-
 plugins/buildpacks/subcommands.go                 |  4 ++--
 4 files changed, 20 insertions(+), 6 deletions(-)

diff --git a/plugins/buildpacks/functions.go b/plugins/buildpacks/functions.go
index 1845efae8..47acbbc78 100644
--- a/plugins/buildpacks/functions.go
+++ b/plugins/buildpacks/functions.go
@@ -64,15 +64,25 @@ func validBuildpackURL(buildpack string) (string, error) {
 	return buildpack, fmt.Errorf("Invalid buildpack specified: %v", buildpack)
 }
 
-func checkoutBareGitRepo(sourceWorkDir string) (string, error) {
+func checkoutBareGitRepo(sourceWorkDir string, branch string) (string, error) {
 	tmpdir, err := os.MkdirTemp("", "bare-git-checkout")
 	if err != nil {
 		return "", fmt.Errorf("Unable to create temporary directory: %s", err.Error())
 	}
 
+	args := []string{
+		"--git-dir=" + sourceWorkDir,
+		"--work-tree=" + tmpdir,
+		"checkout", "-f",
+	}
+
+	if branch != "" {
+		args = append(args, branch)
+	}
+
 	result, err := common.CallExecCommand(common.ExecCommandInput{
 		Command: "git",
-		Args:    []string{"--git-dir=" + sourceWorkDir, "--work-tree=" + tmpdir, "checkout", "-f"},
+		Args:    args,
 	})
 
 	if err != nil {
diff --git a/plugins/buildpacks/src/commands/commands.go b/plugins/buildpacks/src/commands/commands.go
index c2238a5a4..51eb30a15 100644
--- a/plugins/buildpacks/src/commands/commands.go
+++ b/plugins/buildpacks/src/commands/commands.go
@@ -20,7 +20,7 @@ Additional commands:`
 	helpContent = `
     buildpacks:add [--index 1] <app> <buildpack>, Add new app buildpack while inserting into list of buildpacks if necessary
     buildpacks:clear <app>, Clear all buildpacks set on the app
-    buildpacks:detect <app>, Detect the buildpack for an app
+    buildpacks:detect <app> [--branch <branch-name>], Detect the buildpack for an app (if not specified, the branch flag defaults to the deploy branch)
     buildpacks:list <app>, List all buildpacks for an app
     buildpacks:remove <app> <buildpack>, Remove a buildpack set on the app
     buildpacks:report [<app>] [<flag>], Displays a buildpack report for one or more apps
diff --git a/plugins/buildpacks/src/subcommands/subcommands.go b/plugins/buildpacks/src/subcommands/subcommands.go
index d1c596bcc..9062e80fa 100644
--- a/plugins/buildpacks/src/subcommands/subcommands.go
+++ b/plugins/buildpacks/src/subcommands/subcommands.go
@@ -32,9 +32,13 @@ func main() {
 		err = buildpacks.CommandClear(appName)
 	case "detect":
 		args := flag.NewFlagSet("buildpacks:detect", flag.ExitOnError)
+		branch := args.String("branch", "", "--branch: the branch to detect against (defaults to the deploy branch)")
 		args.Parse(os.Args[2:])
 		appName := args.Arg(0)
-		err = buildpacks.CommandDetect(appName)
+		if *branch == "" {
+            *branch = common.PropertyGet("git", appName, "deploy-branch")
+		}
+		err = buildpacks.CommandDetect(appName, *branch)
 	case "list":
 		args := flag.NewFlagSet("buildpacks:list", flag.ExitOnError)
 		args.Parse(os.Args[2:])
diff --git a/plugins/buildpacks/subcommands.go b/plugins/buildpacks/subcommands.go
index 86255e628..079de2091 100644
--- a/plugins/buildpacks/subcommands.go
+++ b/plugins/buildpacks/subcommands.go
@@ -32,13 +32,13 @@ func CommandClear(appName string) error {
 }
 
 // CommandDetect implements buildpacks:detect
-func CommandDetect(appName string) error {
+func CommandDetect(appName string, branch string) (err error) {
 	if err := common.VerifyAppName(appName); err != nil {
 		return err
 	}
 
 	workDir := common.AppRoot(appName)
-	checkedOutDir, err := checkoutBareGitRepo(workDir)
+	checkedOutDir, err := checkoutBareGitRepo(workDir, branch)
     if err != nil {
         return err
     }

From a7a4098a89207701489ca8a15fbe8360e558c75a Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Fri, 17 Oct 2025 03:55:38 +0000
Subject: [PATCH 026/427] Release 0.36.9

# History

## 0.36.9

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.36.9/bootstrap.sh
sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh
```

### Bug Fixes

- #8032: @josegonzalez Set correct labels for tests/apps/dockerfile-release pip updates

### New Features

- #8047: @josegonzalez Add ability to disable letsencrypt for a given application or globally

### Dependencies

- #8049: @dependabot[bot] chore(deps): bump github.com/cert-manager/cert-manager from 1.19.0 to 1.19.1 in /plugins/scheduler-k3s
- #8048: @dependabot[bot] chore(deps): bump mkdocs-material from 9.6.21 to 9.6.22 in /docs/_build
- #8042: @dependabot[bot] chore(deps): bump django from 5.1.13 to 5.2.7 in /tests/apps/dockerfile-release
- #8043: @dependabot[bot] chore(deps): bump whitenoise from 6.2.0 to 6.11.0 in /tests/apps/dockerfile-release
- #8044: @dependabot[bot] chore(deps): bump djangorestframework from 3.15.2 to 3.16.1 in /tests/apps/dockerfile-release
- #8045: @dependabot[bot] chore(deps): bump psycopg2-binary from 2.9.5 to 2.9.11 in /tests/apps/dockerfile-release
- #8046: @dependabot[bot] chore(deps): bump dj-database-url from 1.0.0 to 3.0.1 in /tests/apps/dockerfile-release
- #8041: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/gogrpc
- #8040: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/go-fail-predeploy
- #8039: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/zombies-dockerfile-no-tini
- #8037: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/go-fail-postdeploy
- #8038: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/zombies-dockerfile-tini
- #8036: @dependabot[bot] chore(deps): bump actions/setup-node from 5 to 6
- #8033: @dependabot[bot] chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 in /plugins/scheduler-k3s
- #8034: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.17.1-0.20250708210620-a239d2459a35 to 2.18.0 in /plugins/scheduler-k3s
---
 HISTORY.md                                 | 35 +++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 56 files changed, 167 insertions(+), 132 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index 94ae9b452..acd2f157a 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,40 @@
 # History
 
+## 0.36.9
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.36.9/bootstrap.sh
+sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8032: @josegonzalez Set correct labels for tests/apps/dockerfile-release pip updates
+
+### New Features
+
+- #8047: @josegonzalez Add ability to disable letsencrypt for a given application or globally
+
+### Dependencies
+
+- #8049: @dependabot[bot] chore(deps): bump github.com/cert-manager/cert-manager from 1.19.0 to 1.19.1 in /plugins/scheduler-k3s
+- #8048: @dependabot[bot] chore(deps): bump mkdocs-material from 9.6.21 to 9.6.22 in /docs/_build
+- #8042: @dependabot[bot] chore(deps): bump django from 5.1.13 to 5.2.7 in /tests/apps/dockerfile-release
+- #8043: @dependabot[bot] chore(deps): bump whitenoise from 6.2.0 to 6.11.0 in /tests/apps/dockerfile-release
+- #8044: @dependabot[bot] chore(deps): bump djangorestframework from 3.15.2 to 3.16.1 in /tests/apps/dockerfile-release
+- #8045: @dependabot[bot] chore(deps): bump psycopg2-binary from 2.9.5 to 2.9.11 in /tests/apps/dockerfile-release
+- #8046: @dependabot[bot] chore(deps): bump dj-database-url from 1.0.0 to 3.0.1 in /tests/apps/dockerfile-release
+- #8041: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/gogrpc
+- #8040: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/go-fail-predeploy
+- #8039: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/zombies-dockerfile-no-tini
+- #8037: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/go-fail-postdeploy
+- #8038: @dependabot[bot] chore(deps): bump golang from 1.25.2 to 1.25.3 in /tests/apps/zombies-dockerfile-tini
+- #8036: @dependabot[bot] chore(deps): bump actions/setup-node from 5 to 6
+- #8033: @dependabot[bot] chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 in /plugins/scheduler-k3s
+- #8034: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.17.1-0.20250708210620-a239d2459a35 to 2.18.0 in /plugins/scheduler-k3s
+
 ## 0.36.8
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 94e8c4814..a24218cda 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.36.8/bootstrap.sh
-sudo DOKKU_TAG=v0.36.8 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.36.9/bootstrap.sh
+sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index ede9715b6..594b14f0b 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.36.8
+Version: 0.36.9
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 0266075d2..0314b0cd6 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.36.8 enabled    dokku core standard plugin
-  20_events            0.36.8 enabled    dokku core events logging plugin
-  app-json             0.36.8 enabled    dokku core app-json plugin
-  apps                 0.36.8 enabled    dokku core apps plugin
-  build-env            0.36.8 enabled    dokku core build-env plugin
-  buildpacks           0.36.8 enabled    dokku core buildpacks plugin
-  certs                0.36.8 enabled    dokku core certificate management plugin
-  checks               0.36.8 enabled    dokku core checks plugin
-  common               0.36.8 enabled    dokku core common plugin
-  config               0.36.8 enabled    dokku core config plugin
-  docker-options       0.36.8 enabled    dokku core docker-options plugin
-  domains              0.36.8 enabled    dokku core domains plugin
-  enter                0.36.8 enabled    dokku core enter plugin
-  git                  0.36.8 enabled    dokku core git plugin
-  logs                 0.36.8 enabled    dokku core logs plugin
-  network              0.36.8 enabled    dokku core network plugin
-  nginx-vhosts         0.36.8 enabled    dokku core nginx-vhosts plugin
-  plugin               0.36.8 enabled    dokku core plugin plugin
-  proxy                0.36.8 enabled    dokku core proxy plugin
-  ps                   0.36.8 enabled    dokku core ps plugin
-  repo                 0.36.8 enabled    dokku core repo plugin
-  resource             0.36.8 enabled    dokku core resource plugin
-  scheduler-docker-local 0.36.8 enabled    dokku core scheduler-docker-local plugin
-  shell                0.36.8 enabled    dokku core shell plugin
-  ssh-keys             0.36.8 enabled    dokku core ssh-keys plugin
-  storage              0.36.8 enabled    dokku core storage plugin
-  tags                 0.36.8 enabled    dokku core tags plugin
-  tar                  0.36.8 enabled    dokku core tar plugin
-  trace                0.36.8 enabled    dokku core trace plugin
+  00_dokku-standard    0.36.9 enabled    dokku core standard plugin
+  20_events            0.36.9 enabled    dokku core events logging plugin
+  app-json             0.36.9 enabled    dokku core app-json plugin
+  apps                 0.36.9 enabled    dokku core apps plugin
+  build-env            0.36.9 enabled    dokku core build-env plugin
+  buildpacks           0.36.9 enabled    dokku core buildpacks plugin
+  certs                0.36.9 enabled    dokku core certificate management plugin
+  checks               0.36.9 enabled    dokku core checks plugin
+  common               0.36.9 enabled    dokku core common plugin
+  config               0.36.9 enabled    dokku core config plugin
+  docker-options       0.36.9 enabled    dokku core docker-options plugin
+  domains              0.36.9 enabled    dokku core domains plugin
+  enter                0.36.9 enabled    dokku core enter plugin
+  git                  0.36.9 enabled    dokku core git plugin
+  logs                 0.36.9 enabled    dokku core logs plugin
+  network              0.36.9 enabled    dokku core network plugin
+  nginx-vhosts         0.36.9 enabled    dokku core nginx-vhosts plugin
+  plugin               0.36.9 enabled    dokku core plugin plugin
+  proxy                0.36.9 enabled    dokku core proxy plugin
+  ps                   0.36.9 enabled    dokku core ps plugin
+  repo                 0.36.9 enabled    dokku core repo plugin
+  resource             0.36.9 enabled    dokku core resource plugin
+  scheduler-docker-local 0.36.9 enabled    dokku core scheduler-docker-local plugin
+  shell                0.36.9 enabled    dokku core shell plugin
+  ssh-keys             0.36.9 enabled    dokku core ssh-keys plugin
+  storage              0.36.9 enabled    dokku core storage plugin
+  tags                 0.36.9 enabled    dokku core tags plugin
+  tar                  0.36.9 enabled    dokku core tar plugin
+  trace                0.36.9 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index 5f8e8a4e5..a62b1e0b8 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index cb2a5dbaa..25c0456dc 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.8\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.8\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.8\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.8\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.8\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.8\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index 6c9e7a063..e5073c762 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -33,6 +33,6 @@
     "0.33.9",
     "0.34.9",
     "0.35.20",
-    "0.36.8"
+    "0.36.9"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 920aed1b1..540861b46 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.36.8-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.36.9-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 3e9b1993d..55fdabca2 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.36.8
+docker pull dokku/dokku:0.36.9
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.36.8
+  dokku/dokku:0.36.9
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.36.8
+    image: dokku/dokku:0.36.9
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command. Note that the version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.36.8
+FROM dokku/dokku:0.36.9
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git postgres
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git redis
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 74badc8d6..6beb7027a 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -37,8 +37,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.36.8/bootstrap.sh
-sudo DOKKU_TAG=v0.36.8 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.36.9/bootstrap.sh
+sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index b61aa2518..4684a4acb 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.8</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.9</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.36.8 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 66a235b25..746ddac82 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.8/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 2e4102487..745bb874a 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index fda9f2244..6a5d5bbd1 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index 3321483d7..14a1a0a3a 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index d9da1d85b..4ba80616b 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index 50bb892d2..a611b97c8 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index 67f882ff8..6ec2d13c1 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 9dc20e4f9..eddc974d1 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index 3152100c5..24481ae53 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 54663bc5f..3927b3f2c 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 1c18153c2..2f1762fd5 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 53838bf4b..8439349a2 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index ce4ef60ab..94e01ad3d 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index 02c72f0c9..527ade176 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 67416365a..058344880 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 014afbf5f..3f1284e73 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index 7da89e8c0..b326a92c5 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index a7ddd9e76..2a0c669d8 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index e511f60aa..df1dff07a 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index e376f9a75..c3bdd9e57 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index a9cee3792..4482ed6de 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index c3f7791bf..e1f7a79b4 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index 525899657..fadc2beee 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index f9969c189..c6facc654 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index 96c18d934..1f4dc8da0 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index d7c5e127b..6369bf137 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index c30c83a0e..89e45057d 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 6dceddfd1..8a4cc62af 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 90fdf9a4c..4092a0c3a 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 77a3dee34..c80be967e 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 3495748e7..57a589f76 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index e03b5e64d..b09a7042a 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index 642b4650f..9f9293aaa 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index 520995fbd..7df31bbbc 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 279ba0c35..8eeff2c62 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 3baa6f83a..48a5ce94c 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 766a91ab6..39c194fca 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index d3031ba25..5dc4ce15a 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index 4ca9e86b1..7ee0dc357 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 9ac1f3a0b..6abc21aa5 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 414080c36..0681983f4 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 305b282f0..02a3459d1 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 1071dcd04..41b4cc63b 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 86a613031..01c7c4e4d 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 25a159ce5..3e9494f6d 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.36.8"
+version = "0.36.9"
 [plugin.config]

From 1d3276a1d7c94ec9d040b1c81c0f1beeb146ceb0 Mon Sep 17 00:00:00 2001
From: othercorey <corey.taylor.fl@gmail.com>
Date: Thu, 16 Oct 2025 23:37:37 -0500
Subject: [PATCH 027/427] Fix "its" in Caddy SSL configuration documentation

---
 docs/networking/proxies/caddy.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/networking/proxies/caddy.md b/docs/networking/proxies/caddy.md
index b56ab994d..7edaa6cdf 100644
--- a/docs/networking/proxies/caddy.md
+++ b/docs/networking/proxies/caddy.md
@@ -129,7 +129,7 @@ This will update the app's label key to `caddy_0`. The label key is used to iden
 
 ### SSL Configuration
 
-The caddy plugin only supports automatic ssl certificates from it's letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.
+The caddy plugin only supports automatic ssl certificates from its letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.
 
 #### Enabling letsencrypt integration
 

From 44918d22aba9cdb671c260fce0e956841227711f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Oct 2025 13:05:47 +0000
Subject: [PATCH 028/427] chore(deps): bump node in
 /tests/apps/dockerfile-noexpose

Bumps node from 24-alpine to 25-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-noexpose/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-noexpose/Dockerfile b/tests/apps/dockerfile-noexpose/Dockerfile
index 4a01ffa2a..86f44ba31 100644
--- a/tests/apps/dockerfile-noexpose/Dockerfile
+++ b/tests/apps/dockerfile-noexpose/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine
+FROM node:25-alpine
 
 RUN apk add --no-cache bash
 

From 74899b580d0ab8d280853afbf90b6451aff2a105 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Oct 2025 13:05:50 +0000
Subject: [PATCH 029/427] chore(deps): bump node in /tests/apps/dockerfile

Bumps node from 24-alpine to 25-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile/Dockerfile        | 2 +-
 tests/apps/dockerfile/second.Dockerfile | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/apps/dockerfile/Dockerfile b/tests/apps/dockerfile/Dockerfile
index 65dc60482..594b191b0 100644
--- a/tests/apps/dockerfile/Dockerfile
+++ b/tests/apps/dockerfile/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine
+FROM node:25-alpine
 
 RUN apk add --no-cache bash
 
diff --git a/tests/apps/dockerfile/second.Dockerfile b/tests/apps/dockerfile/second.Dockerfile
index cc818ea17..cdf3453dd 100644
--- a/tests/apps/dockerfile/second.Dockerfile
+++ b/tests/apps/dockerfile/second.Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine
+FROM node:25-alpine
 
 RUN apk add --no-cache bash
 

From a5875f4326abc19526265024533fd77705df03b7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Oct 2025 13:06:21 +0000
Subject: [PATCH 030/427] chore(deps): bump node in
 /tests/apps/dockerfile-procfile

Bumps node from 24-alpine to 25-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-procfile/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-procfile/Dockerfile b/tests/apps/dockerfile-procfile/Dockerfile
index 2be706d67..643c4172e 100644
--- a/tests/apps/dockerfile-procfile/Dockerfile
+++ b/tests/apps/dockerfile-procfile/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine
+FROM node:25-alpine
 
 RUN apk add --no-cache bash
 

From 50b59cba7f7891e00babc6f75219939eeef29b33 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Oct 2025 13:06:31 +0000
Subject: [PATCH 031/427] chore(deps): bump node in
 /tests/apps/dockerfile-app-json-formations

Bumps node from 24-alpine to 25-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-app-json-formations/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-app-json-formations/Dockerfile b/tests/apps/dockerfile-app-json-formations/Dockerfile
index 2be706d67..643c4172e 100644
--- a/tests/apps/dockerfile-app-json-formations/Dockerfile
+++ b/tests/apps/dockerfile-app-json-formations/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine
+FROM node:25-alpine
 
 RUN apk add --no-cache bash
 

From 3aca35df8881a63b745a3ef8d88d95e41d16bd5c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Oct 2025 13:06:43 +0000
Subject: [PATCH 032/427] chore(deps): bump node in
 /tests/apps/dockerfile-procfile-bad

Bumps node from 24-alpine to 25-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-procfile-bad/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-procfile-bad/Dockerfile b/tests/apps/dockerfile-procfile-bad/Dockerfile
index 2be706d67..643c4172e 100644
--- a/tests/apps/dockerfile-procfile-bad/Dockerfile
+++ b/tests/apps/dockerfile-procfile-bad/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine
+FROM node:25-alpine
 
 RUN apk add --no-cache bash
 

From f40bcc37aa182fc46ad22a96e3d98e60c09a22a8 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <tas.o.s@hotmail.com>
Date: Thu, 16 Oct 2025 18:35:02 +0300
Subject: [PATCH 033/427] Bump dependency version for herokuish

---
 contrib/dependencies.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/contrib/dependencies.json b/contrib/dependencies.json
index 0a9827f4c..9a10d8e84 100644
--- a/contrib/dependencies.json
+++ b/contrib/dependencies.json
@@ -86,11 +86,11 @@
     },
     {
       "name": "herokuish",
-      "version": "0.11.3",
+      "version": "0.11.5",
       "urls": {
-        "amd64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.3/herokuish_0.11.3_linux_x86_64.tgz",
-        "arm64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.3/herokuish_0.11.3_linux_x86_64.tgz"
+        "amd64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.5/herokuish_0.11.5_linux_x86_64.tgz",
+        "arm64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.5/herokuish_0.11.5_linux_x86_64.tgz"
       }
     }
   ]
-}
\ No newline at end of file
+}

From ca03ea72f567cc7ed8debffb75edca0f838ef747 Mon Sep 17 00:00:00 2001
From: Tasos Maschalidis <tas.o.s@hotmail.com>
Date: Fri, 17 Oct 2025 19:14:08 +0300
Subject: [PATCH 034/427] Remove unnecessary re-assignment of workDir variable

---
 plugins/buildpacks/subcommands.go | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/plugins/buildpacks/subcommands.go b/plugins/buildpacks/subcommands.go
index 079de2091..ffabb5eaa 100644
--- a/plugins/buildpacks/subcommands.go
+++ b/plugins/buildpacks/subcommands.go
@@ -42,7 +42,6 @@ func CommandDetect(appName string, branch string) (err error) {
     if err != nil {
         return err
     }
-	workDir = checkedOutDir
 	defer func() {
 		if err := os.RemoveAll(checkedOutDir); err != nil {
 			common.LogWarn(fmt.Sprintf("Failed to remove temporary directory %s: %v", checkedOutDir, err))
@@ -51,7 +50,7 @@ func CommandDetect(appName string, branch string) (err error) {
 
 	dockerArgs := []string{
 		"run", "--rm",
-		"-v", fmt.Sprintf("%s:/tmp/app", workDir),
+		"-v", fmt.Sprintf("%s:/tmp/app", checkedOutDir),
 		"gliderlabs/herokuish", "/bin/herokuish", "buildpack", "detect", "/tmp/app",
 	}
 

From efd25cfb458c618ce79be5d1dbc7d3f2777d6a52 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 19 Oct 2025 22:12:34 -0400
Subject: [PATCH 035/427] fix: ensure the pre-receive hook and URLS files are
 correct when cloning or renaming apps

Closes #8035
---
 plugins/git/post-app-clone-setup  | 10 +++++-----
 plugins/git/post-app-rename-setup | 10 +++++-----
 tests/unit/apps_1.bats            |  6 ++++++
 3 files changed, 16 insertions(+), 10 deletions(-)

diff --git a/plugins/git/post-app-clone-setup b/plugins/git/post-app-clone-setup
index 04d9c5855..89396095e 100755
--- a/plugins/git/post-app-clone-setup
+++ b/plugins/git/post-app-clone-setup
@@ -8,15 +8,15 @@ trigger-git-post-app-clone-setup() {
   declare trigger="post-app-clone-setup"
   declare OLD_APP="$1" NEW_APP="$2"
 
-  if [[ -f "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive" ]]; then
-    sed -i -e "s/git-hook $OLD_APP/git-hook $NEW_APP/g" "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive"
-  fi
-
   fn-plugin-property-clone "git" "$OLD_APP" "$NEW_APP"
 
   pushd "$DOKKU_ROOT/$OLD_APP/." >/dev/null
-  find ./* \( -name ".cache" -o -name "cache" -o -name "VHOST" \) -prune -o -print | cpio -pdmu --quiet "$DOKKU_ROOT/$NEW_APP"
+  find ./* \( -name ".cache" -o -name "cache" -o -name "VHOST" -o -name "URLS" \) -prune -o -print | cpio -pdmu --quiet "$DOKKU_ROOT/$NEW_APP"
   popd &>/dev/null || pushd "/tmp" >/dev/null
+
+  if [[ -f "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive" ]]; then
+    sed -i -e "s/git-hook $OLD_APP/git-hook $NEW_APP/g" "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive"
+  fi
 }
 
 trigger-git-post-app-clone-setup "$@"
diff --git a/plugins/git/post-app-rename-setup b/plugins/git/post-app-rename-setup
index 0482d58e2..2948823ad 100755
--- a/plugins/git/post-app-rename-setup
+++ b/plugins/git/post-app-rename-setup
@@ -8,16 +8,16 @@ trigger-git-post-app-rename-setup() {
   declare trigger="post-app-rename-setup"
   declare OLD_APP="$1" NEW_APP="$2"
 
-  if [[ -f "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive" ]]; then
-    sed -i -e "s/git-hook $OLD_APP/git-hook $NEW_APP/g" "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive"
-  fi
-
   fn-plugin-property-clone "git" "$OLD_APP" "$NEW_APP"
   fn-plugin-property-destroy "git" "$OLD_APP"
 
   pushd "$DOKKU_ROOT/$OLD_APP/." >/dev/null
-  find ./* \( -name ".cache" -o -name "cache" -o -name "VHOST" \) -prune -o -print | cpio -pdmu --quiet "$DOKKU_ROOT/$NEW_APP"
+  find ./* \( -name ".cache" -o -name "cache" -o -name "VHOST" -o -name "URLS" \) -prune -o -print | cpio -pdmu --quiet "$DOKKU_ROOT/$NEW_APP"
   popd &>/dev/null || pushd "/tmp" >/dev/null
+
+  if [[ -f "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive" ]]; then
+    sed -i -e "s/git-hook $OLD_APP/git-hook $NEW_APP/g" "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive"
+  fi
 }
 
 trigger-git-post-app-rename-setup "$@"
diff --git a/tests/unit/apps_1.bats b/tests/unit/apps_1.bats
index 5b85ffacd..ec0742092 100644
--- a/tests/unit/apps_1.bats
+++ b/tests/unit/apps_1.bats
@@ -152,10 +152,16 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
+  assert_output_contains "git-hook $TEST_APP"
   run /bin/bash -c "dokku apps:rename $TEST_APP great-test-name"
   echo "output: $output"
   echo "status: $status"
   assert_success
+  run /bin/bash -c "cat $DOKKU_ROOT/$TEST_APP/hooks/pre-receive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "git-hook great-test-name"
   run /bin/bash -c "dokku apps:list | grep $TEST_APP"
   echo "output: $output"
   echo "status: $status"

From 9d711cbb4472f41516d699cc86565abcd4f01843 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 19 Oct 2025 23:33:04 -0400
Subject: [PATCH 036/427] fix: expand variables for release tasks

Procfile commands need to be expanded with actual environment variables as procfile-util will otherwise empty them out. This doesn't happen for app.json scripts as they are never expanded until the docker container gets created.

Closes #8050
---
 plugins/ps/functions.go | 25 +++++++++++++++++++++++--
 plugins/ps/triggers.go  |  2 +-
 2 files changed, 24 insertions(+), 3 deletions(-)

diff --git a/plugins/ps/functions.go b/plugins/ps/functions.go
index b6af4f6dc..068f8ab9e 100644
--- a/plugins/ps/functions.go
+++ b/plugins/ps/functions.go
@@ -18,14 +18,35 @@ func canScaleApp(appName string) bool {
 	return common.ToBool(canScale)
 }
 
-func getProcfileCommand(procfilePath string, processType string, port int) (string, error) {
+func getProcfileCommand(appName string, procfilePath string, processType string, port int) (string, error) {
 	if !common.FileExists(procfilePath) {
 		return "", errors.New("No procfile found")
 	}
 
+	configResult, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
+		Trigger: "config-export",
+		Args:    []string{appName, "false", "true", "envfile"},
+	})
+	if err != nil {
+		return "", err
+	}
+
+	// write the envfile to a temporary file
+	tempFile, err := os.CreateTemp("", "envfile-*.env")
+	if err != nil {
+		return "", err
+	}
+	defer os.Remove(tempFile.Name())
+	if _, err := tempFile.Write(configResult.StdoutBytes()); err != nil {
+		return "", err
+	}
+	if err := tempFile.Close(); err != nil {
+		return "", err
+	}
+
 	result, err := common.CallExecCommand(common.ExecCommandInput{
 		Command: "procfile-util",
-		Args:    []string{"show", "--procfile", procfilePath, "--process-type", processType, "--default-port", strconv.Itoa(port)},
+		Args:    []string{"show", "--procfile", procfilePath, "--process-type", processType, "--default-port", strconv.Itoa(port), "--env-file", tempFile.Name()},
 	})
 	if err != nil {
 		return "", fmt.Errorf("Error running procfile-util: %s", err)
diff --git a/plugins/ps/triggers.go b/plugins/ps/triggers.go
index ad69a9f61..0e355933c 100644
--- a/plugins/ps/triggers.go
+++ b/plugins/ps/triggers.go
@@ -274,7 +274,7 @@ func TriggerProcfileGetCommand(appName string, processType string, port int) err
 		return nil
 	}
 
-	command, err := getProcfileCommand(getProcessSpecificProcfilePath(appName), processType, port)
+	command, err := getProcfileCommand(appName, getProcessSpecificProcfilePath(appName), processType, port)
 	if err != nil {
 		return err
 	}

From 933a174dfdcf9184d59ceb4bef0cc14648c42dc5 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 19 Oct 2025 23:47:00 -0400
Subject: [PATCH 037/427] fix: use updated http2 directive for setting http2
 support

Closes #7997
---
 plugins/nginx-vhosts/functions                | 29 ++++++++++++++++++-
 .../nginx-vhosts/templates/nginx.conf.sigil   | 18 ++++++++++++
 2 files changed, 46 insertions(+), 1 deletion(-)

diff --git a/plugins/nginx-vhosts/functions b/plugins/nginx-vhosts/functions
index 7eb239bc4..e67cfb070 100755
--- a/plugins/nginx-vhosts/functions
+++ b/plugins/nginx-vhosts/functions
@@ -181,6 +181,9 @@ is_http2_push_enabled() {
     elif [[ "$MINOR_VERSION" -ge "14" ]]; then
       HAS_SUPPORT=true
     fi
+    if [[ "$MINOR_VERSION" -eq "25" ]]; then
+      HAS_SUPPORT=false
+    fi
   fi
 
   echo $HAS_SUPPORT
@@ -208,6 +211,28 @@ is_http2_enabled() {
   echo $HAS_SUPPORT
 }
 
+is_http2_directive_supported() {
+  declare desc="detects whether the installed nginx version has http2 directive support"
+  local NGINX_VERSION="$1"
+  local MAJOR_VERSION MINOR_VERSION PATCH_VERSION
+  local HAS_SUPPORT=false
+
+  MAJOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[1]}')
+  MINOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[2]}')
+  PATCH_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[3]}')
+  if [[ "$MAJOR_VERSION" -ge "2" ]]; then
+    HAS_SUPPORT=true
+  elif [[ "$MAJOR_VERSION" -eq "1" ]]; then
+    if [[ "$MINOR_VERSION" -eq "25" ]] && [[ "$PATCH_VERSION" -ge "1" ]]; then
+      HAS_SUPPORT=true
+    elif [[ "$MINOR_VERSION" -ge "26" ]]; then
+      HAS_SUPPORT=true
+    fi
+  fi
+
+  echo $HAS_SUPPORT
+}
+
 is_grpc_enabled() {
   declare desc="detects whether the installed nginx version has grpc support"
   local NGINX_VERSION="$1"
@@ -310,7 +335,7 @@ nginx_build_config() {
       done
     fi
 
-    local NGINX_LOCATION NGINX_VERSION SPDY_SUPPORTED TLS13_SUPPORTED HTTP2_SUPPORTED HTTP2_PUSH_SUPPORTED GRPC_SUPPORTED
+    local NGINX_LOCATION NGINX_VERSION SPDY_SUPPORTED TLS13_SUPPORTED HTTP2_SUPPORTED HTTP2_PUSH_SUPPORTED HTTP2_DIRECTIVE_SUPPORTED GRPC_SUPPORTED
     NGINX_LOCATION=$(get_nginx_location)
     if [[ -z "$NGINX_LOCATION" ]]; then
       exit 1
@@ -320,6 +345,7 @@ nginx_build_config() {
     SPDY_SUPPORTED="false"
     TLS13_SUPPORTED="$(is_tls13_available "$NGINX_VERSION")"
     HTTP2_SUPPORTED="$(is_http2_enabled "$NGINX_VERSION")"
+    HTTP2_DIRECTIVE_SUPPORTED="$(is_http2_directive_supported "$NGINX_VERSION")"
     HTTP2_PUSH_SUPPORTED="$(is_http2_push_enabled "$NGINX_VERSION")"
     GRPC_SUPPORTED="$(is_grpc_enabled "$NGINX_VERSION")"
 
@@ -388,6 +414,7 @@ nginx_build_config() {
         NGINX_ERROR_LOG_PATH="$NGINX_ERROR_LOG_PATH"
         NGINX_BIND_ADDRESS_IP4="$NGINX_BIND_ADDRESS_IP4"
         NGINX_BIND_ADDRESS_IP6="$NGINX_BIND_ADDRESS_IP6"
+        HTTP2_DIRECTIVE_SUPPORTED="$HTTP2_DIRECTIVE_SUPPORTED"
         HTTP2_PUSH_SUPPORTED="$HTTP2_PUSH_SUPPORTED"
         GRPC_SUPPORTED="$GRPC_SUPPORTED"
         DOKKU_APP_LISTEN_PORT="$DOKKU_APP_LISTEN_PORT" DOKKU_APP_LISTEN_IP="$DOKKU_APP_LISTEN_IP"
diff --git a/plugins/nginx-vhosts/templates/nginx.conf.sigil b/plugins/nginx-vhosts/templates/nginx.conf.sigil
index e75a32424..5b5e6c052 100644
--- a/plugins/nginx-vhosts/templates/nginx.conf.sigil
+++ b/plugins/nginx-vhosts/templates/nginx.conf.sigil
@@ -77,8 +77,14 @@ server {
 }
 {{ else if eq $scheme "https"}}
 server {
+  {{ if eq $.HTTP2_DIRECTIVE_SUPPORTED "true" }}
+  listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl;
+  listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl;
+  http2 on;
+  {{ else }}
   listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl {{ if eq $.HTTP2_SUPPORTED "true" }}http2{{ end }};
   listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl {{ if eq $.HTTP2_SUPPORTED "true" }}http2{{ end }};
+  {{ end }}
   {{ if $.SSL_SERVER_NAME }}server_name {{ $.SSL_SERVER_NAME }}; {{ end }}
   {{ if $.NOSSL_SERVER_NAME }}server_name {{ $.NOSSL_SERVER_NAME }}; {{ end }}
   access_log  {{ $.NGINX_ACCESS_LOG_PATH }}{{ if and ($.NGINX_ACCESS_LOG_FORMAT) (ne $.NGINX_ACCESS_LOG_PATH "off") }} {{ $.NGINX_ACCESS_LOG_FORMAT }}{{ end }};
@@ -155,8 +161,14 @@ server {
 {{ else if eq $scheme "grpc"}}
 {{ if eq $.GRPC_SUPPORTED "true"}}{{ if eq $.HTTP2_SUPPORTED "true"}}
 server {
+  {{ if eq $.HTTP2_DIRECTIVE_SUPPORTED "true" }}
+  listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }};
+  listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }};
+  http2 on;
+  {{ else }}
   listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} http2;
   listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} http2;
+  {{ end }}
   {{ if $.NOSSL_SERVER_NAME }}server_name {{ $.NOSSL_SERVER_NAME }}; {{ end }}
   access_log  {{ $.NGINX_ACCESS_LOG_PATH }}{{ if and ($.NGINX_ACCESS_LOG_FORMAT) (ne $.NGINX_ACCESS_LOG_PATH "off") }} {{ $.NGINX_ACCESS_LOG_FORMAT }}{{ end }};
   error_log   {{ $.NGINX_ERROR_LOG_PATH }};
@@ -172,8 +184,14 @@ server {
 {{ else if eq $scheme "grpcs"}}
 {{ if eq $.GRPC_SUPPORTED "true"}}{{ if eq $.HTTP2_SUPPORTED "true"}}
 server {
+  {{ if eq $.HTTP2_DIRECTIVE_SUPPORTED "true" }}
+  listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl;
+  listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl;
+  http2 on;
+  {{ else }}
   listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl http2;
   listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl http2;
+  {{ end }}
   {{ if $.NOSSL_SERVER_NAME }}server_name {{ $.NOSSL_SERVER_NAME }}; {{ end }}
   access_log  {{ $.NGINX_ACCESS_LOG_PATH }}{{ if and ($.NGINX_ACCESS_LOG_FORMAT) (ne $.NGINX_ACCESS_LOG_PATH "off") }} {{ $.NGINX_ACCESS_LOG_FORMAT }}{{ end }};
   error_log   {{ $.NGINX_ERROR_LOG_PATH }};

From 8afe8d5f13f84ab4738977e4a21b2c6a1aca183a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 25 Oct 2025 07:20:17 -0400
Subject: [PATCH 038/427] refactor: use fn-git-create-hook

---
 plugins/git/post-app-clone-setup  | 5 ++---
 plugins/git/post-app-rename-setup | 5 ++---
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/plugins/git/post-app-clone-setup b/plugins/git/post-app-clone-setup
index 89396095e..8d9939d5c 100755
--- a/plugins/git/post-app-clone-setup
+++ b/plugins/git/post-app-clone-setup
@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+source "$PLUGIN_AVAILABLE_PATH/git/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
@@ -14,9 +15,7 @@ trigger-git-post-app-clone-setup() {
   find ./* \( -name ".cache" -o -name "cache" -o -name "VHOST" -o -name "URLS" \) -prune -o -print | cpio -pdmu --quiet "$DOKKU_ROOT/$NEW_APP"
   popd &>/dev/null || pushd "/tmp" >/dev/null
 
-  if [[ -f "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive" ]]; then
-    sed -i -e "s/git-hook $OLD_APP/git-hook $NEW_APP/g" "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive"
-  fi
+  fn-git-create-hook "$NEW_APP"
 }
 
 trigger-git-post-app-clone-setup "$@"
diff --git a/plugins/git/post-app-rename-setup b/plugins/git/post-app-rename-setup
index 2948823ad..1398cabd1 100755
--- a/plugins/git/post-app-rename-setup
+++ b/plugins/git/post-app-rename-setup
@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+source "$PLUGIN_AVAILABLE_PATH/git/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
@@ -15,9 +16,7 @@ trigger-git-post-app-rename-setup() {
   find ./* \( -name ".cache" -o -name "cache" -o -name "VHOST" -o -name "URLS" \) -prune -o -print | cpio -pdmu --quiet "$DOKKU_ROOT/$NEW_APP"
   popd &>/dev/null || pushd "/tmp" >/dev/null
 
-  if [[ -f "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive" ]]; then
-    sed -i -e "s/git-hook $OLD_APP/git-hook $NEW_APP/g" "$DOKKU_ROOT/$NEW_APP/hooks/pre-receive"
-  fi
+  fn-git-create-hook "$NEW_APP"
 }
 
 trigger-git-post-app-rename-setup "$@"

From c7c22d83924f66d4f0a7e6a2b195dcf19a74662a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 25 Oct 2025 07:25:54 -0400
Subject: [PATCH 039/427] fix: use plugin:trigger command to test the
 procfile-get-command trigger

---
 tests/unit/ps-general-1.bats | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/unit/ps-general-1.bats b/tests/unit/ps-general-1.bats
index 38bf03193..05aff2709 100644
--- a/tests/unit/ps-general-1.bats
+++ b/tests/unit/ps-general-1.bats
@@ -99,12 +99,12 @@ teardown() {
 web: node web.js --port \$PORT
 worker: node worker.js
 EOF
-  PLUGIN_PATH=/var/lib/dokku/plugins PLUGIN_CORE_AVAILABLE_PATH=/var/lib/dokku/core-plugins/available DOKKU_LIB_ROOT=/var/lib/dokku run plugn trigger procfile-get-command "$TEST_APP" web 5001
+  run /bin/bash -c "dokku plugin:trigger procfile-get-command '$TEST_APP' web 5001"
   echo "output: $output"
   echo "status: $status"
   assert_output "node web.js --port 5001"
 
-  PLUGIN_PATH=/var/lib/dokku/plugins PLUGIN_CORE_AVAILABLE_PATH=/var/lib/dokku/core-plugins/available DOKKU_LIB_ROOT=/var/lib/dokku run plugn trigger procfile-get-command "$TEST_APP" worker
+  run /bin/bash -c "dokku plugin:trigger procfile-get-command '$TEST_APP' worker"
   echo "output: $output"
   echo "status: $status"
   assert_output "node worker.js"

From 66eff6f15e126eb2fe46463bf1717e65abfa7429 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 25 Oct 2025 07:29:12 -0400
Subject: [PATCH 040/427] test: add test for release command

---
 tests/unit/ps-general-1.bats | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/tests/unit/ps-general-1.bats b/tests/unit/ps-general-1.bats
index 05aff2709..661d56395 100644
--- a/tests/unit/ps-general-1.bats
+++ b/tests/unit/ps-general-1.bats
@@ -98,7 +98,14 @@ teardown() {
   cat <<EOF >"$DOKKU_LIB_ROOT/data/ps/$TEST_APP/Procfile"
 web: node web.js --port \$PORT
 worker: node worker.js
+release: interpolated $ENV_VAR
 EOF
+
+  run /bin/bash -c "dokku config:set '$TEST_APP' ENV_VAR=value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
   run /bin/bash -c "dokku plugin:trigger procfile-get-command '$TEST_APP' web 5001"
   echo "output: $output"
   echo "status: $status"
@@ -108,6 +115,11 @@ EOF
   echo "output: $output"
   echo "status: $status"
   assert_output "node worker.js"
+
+  run /bin/bash -c "dokku plugin:trigger procfile-get-command '$TEST_APP' release 5001"
+  echo "output: $output"
+  echo "status: $status"
+  assert_output "interpolated value"
 }
 
 @test "(ps:scale) update formations from Procfile" {

From 2362232fe2687ab23f537a8446610c36070adaaa Mon Sep 17 00:00:00 2001
From: Corey Taylor <corey.taylor.fl@gmail.com>
Date: Sat, 25 Oct 2025 14:24:35 -0500
Subject: [PATCH 041/427] Use -t instead of deprecated --time in stop commands

---
 plugins/scheduler-docker-local/scheduler-deploy   | 2 +-
 plugins/scheduler-docker-local/scheduler-run-stop | 2 +-
 plugins/scheduler-docker-local/scheduler-stop     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-docker-local/scheduler-deploy b/plugins/scheduler-docker-local/scheduler-deploy
index e7e9f4adf..a3c246c7c 100755
--- a/plugins/scheduler-docker-local/scheduler-deploy
+++ b/plugins/scheduler-docker-local/scheduler-deploy
@@ -33,7 +33,7 @@ trigger-scheduler-docker-local-scheduler-deploy() {
 
   DOKKU_NETWORK_BIND_ALL="$(plugn trigger network-get-property "$APP" bind-all-interfaces)"
   DOKKU_DOCKER_STOP_TIMEOUT="$(plugn trigger ps-get-property "$APP" stop-timeout-seconds)"
-  [[ $DOKKU_DOCKER_STOP_TIMEOUT ]] && DOCKER_STOP_TIME_ARG="--time=${DOKKU_DOCKER_STOP_TIMEOUT}"
+  [[ $DOKKU_DOCKER_STOP_TIMEOUT ]] && DOCKER_STOP_TIME_ARG="-t=${DOKKU_DOCKER_STOP_TIMEOUT}"
 
   DOKKU_START_CMD="$(config_get "$APP" DOKKU_START_CMD || true)"
 
diff --git a/plugins/scheduler-docker-local/scheduler-run-stop b/plugins/scheduler-docker-local/scheduler-run-stop
index d72015f38..6eb6eb7e9 100755
--- a/plugins/scheduler-docker-local/scheduler-run-stop
+++ b/plugins/scheduler-docker-local/scheduler-run-stop
@@ -12,7 +12,7 @@ fn-scheduler-docker-local-stop-container() {
     return 0
   fi
 
-  [[ $DOKKU_DOCKER_STOP_TIMEOUT ]] && DOCKER_STOP_TIME_ARG="--time=${DOKKU_DOCKER_STOP_TIMEOUT}"
+  [[ $DOKKU_DOCKER_STOP_TIMEOUT ]] && DOCKER_STOP_TIME_ARG="-t=${DOKKU_DOCKER_STOP_TIMEOUT}"
   if "$DOCKER_BIN" container stop $DOCKER_STOP_TIME_ARG "$CONTAINER_ID_OR_NAME"; then
     return
   fi
diff --git a/plugins/scheduler-docker-local/scheduler-stop b/plugins/scheduler-docker-local/scheduler-stop
index 12fcb5400..51beef518 100755
--- a/plugins/scheduler-docker-local/scheduler-stop
+++ b/plugins/scheduler-docker-local/scheduler-stop
@@ -22,7 +22,7 @@ trigger-scheduler-docker-local-scheduler-stop() {
   local DOKKU_APP_RUNNING_CONTAINER_IDS=$(get_app_running_container_ids "$APP" 2>/dev/null)
   local DOKKU_DOCKER_STOP_TIMEOUT="$(plugn trigger ps-get-property "$APP" stop-timeout-seconds || true)"
 
-  [[ -n "$DOKKU_DOCKER_STOP_TIMEOUT" ]] && DOCKER_STOP_TIME_ARG="--time=${DOKKU_DOCKER_STOP_TIMEOUT}"
+  [[ -n "$DOKKU_DOCKER_STOP_TIMEOUT" ]] && DOCKER_STOP_TIME_ARG="-t=${DOKKU_DOCKER_STOP_TIMEOUT}"
 
   if [[ -n "$DOKKU_APP_RUNNING_CONTAINER_IDS" ]]; then
     for CID in $DOKKU_APP_RUNNING_CONTAINER_IDS; do

From cb4ac3353e9a731119d3b065fe0ba2e70626bd1e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 26 Oct 2025 23:45:08 -0400
Subject: [PATCH 042/427] fix: escape the dollar-sign so it gets properly set
 in the Procfile

---
 tests/unit/ps-general-1.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/ps-general-1.bats b/tests/unit/ps-general-1.bats
index 661d56395..a6fb02da1 100644
--- a/tests/unit/ps-general-1.bats
+++ b/tests/unit/ps-general-1.bats
@@ -98,7 +98,7 @@ teardown() {
   cat <<EOF >"$DOKKU_LIB_ROOT/data/ps/$TEST_APP/Procfile"
 web: node web.js --port \$PORT
 worker: node worker.js
-release: interpolated $ENV_VAR
+release: interpolated \$ENV_VAR
 EOF
 
   run /bin/bash -c "dokku config:set '$TEST_APP' ENV_VAR=value"

From 416222b20a110edbf93e87ee67f38b86ef3bdd00 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 27 Oct 2025 00:07:19 -0400
Subject: [PATCH 043/427] fix: correctly check the git-hook

---
 tests/unit/apps_1.bats | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tests/unit/apps_1.bats b/tests/unit/apps_1.bats
index ec0742092..9d6d3f425 100644
--- a/tests/unit/apps_1.bats
+++ b/tests/unit/apps_1.bats
@@ -152,12 +152,16 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
+  run /bin/bash -c "cat $DOKKU_ROOT/$TEST_APP/hooks/pre-receive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
   assert_output_contains "git-hook $TEST_APP"
   run /bin/bash -c "dokku apps:rename $TEST_APP great-test-name"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  run /bin/bash -c "cat $DOKKU_ROOT/$TEST_APP/hooks/pre-receive"
+  run /bin/bash -c "cat $DOKKU_ROOT/great-test-name/hooks/pre-receive"
   echo "output: $output"
   echo "status: $status"
   assert_success

From 0033a52e283f683de080870e353975865d7ddba9 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 27 Oct 2025 00:19:41 -0400
Subject: [PATCH 044/427] fix: ignore extra strings on the nginx ubuntu version

---
 plugins/nginx-vhosts/functions | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/nginx-vhosts/functions b/plugins/nginx-vhosts/functions
index e67cfb070..1cccc2542 100755
--- a/plugins/nginx-vhosts/functions
+++ b/plugins/nginx-vhosts/functions
@@ -340,7 +340,7 @@ nginx_build_config() {
     if [[ -z "$NGINX_LOCATION" ]]; then
       exit 1
     fi
-    NGINX_VERSION="$("$NGINX_LOCATION" -v 2>&1 | cut -d'/' -f 2)"
+    NGINX_VERSION="$("$NGINX_LOCATION" -v 2>&1 | cut -d'/' -f 2 | awk '{print $1}')"
     # DEPRECATED: Remove me at 1.0.0
     SPDY_SUPPORTED="false"
     TLS13_SUPPORTED="$(is_tls13_available "$NGINX_VERSION")"

From ee600cc3769fe87e06ed269e7c1088e7adbadfa3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Oct 2025 13:58:27 +0000
Subject: [PATCH 045/427] chore(deps): bump actions/download-artifact from 5 to
 6

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1527e5964..92e7d62bd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -120,7 +120,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: download packages
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: build
           path: build
@@ -159,7 +159,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: download packages
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: build
           path: build
@@ -193,7 +193,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: download packages
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: build
           path: build
@@ -230,7 +230,7 @@ jobs:
 
     steps:
       - name: download test-results
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           path: test-results
 

From 823115b1253a9e7609a0ade831731d2c0a96d526 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Oct 2025 14:27:06 +0000
Subject: [PATCH 046/427] chore(deps): bump actions/upload-artifact from 4 to 5

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml      | 6 +++---
 .github/workflows/release.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1527e5964..068ff68e6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
           echo "matrix=$json" >> $GITHUB_OUTPUT
 
       - name: upload packages
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: build
           path: build
@@ -143,7 +143,7 @@ jobs:
           SYNC_GITHUB_PASSWORD: ${{ secrets.SYNC_GITHUB_PASSWORD }}
           SYNC_GITHUB_USERNAME: ${{ secrets.SYNC_GITHUB_USERNAME }}
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v5
         with:
           name: test-results-${{ matrix.index }}
           path: test-results
@@ -214,7 +214,7 @@ jobs:
             2) sudo -E make -e deploy-test-multi ;;
             3) sudo -E make -e deploy-test-go-fail-predeploy deploy-test-go-fail-postdeploy ;;
           esac
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v5
         with:
           name: coverage.${{ matrix.index }}
           path: test-results/coverage
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e0ea6e94b..5f0872e67 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,7 +73,7 @@ jobs:
         run: echo "version=$(cat build/next-version)" >> $GITHUB_OUTPUT
 
       - name: upload packages
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: build
           path: build
@@ -109,7 +109,7 @@ jobs:
           PKR_VAR_dokku_version="${VERSION:1}" make image/build/digitalocean
 
       - name: upload packages
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: digitalocean-manifest.json
           path: digitalocean-manifest.json

From f897dc00344ad19f3df4cd097a4d08fc00cdcb4f Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Mon, 27 Oct 2025 18:28:20 +0000
Subject: [PATCH 047/427] Release 0.36.10

# History

## 0.36.10

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.36.10/bootstrap.sh
sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh
```

### Bug Fixes

- #8063: @othercorey Use -t instead of deprecated --time in stop commands
- #8058: @josegonzalez Ensure the pre-receive hook and URLS files are correct when cloning or renaming apps
- #8059: @josegonzalez Expand variables for release tasks
- #8060: @josegonzalez Use updated http2 directive for setting http2 support

### Documentation

- #8051: @othercorey Fix "its" in Caddy SSL configuration documentation

### Dependencies

- #8065: @dependabot[bot] chore(deps): bump actions/upload-artifact from 4 to 5
- #8064: @dependabot[bot] chore(deps): bump actions/download-artifact from 5 to 6
- #8057: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-procfile-bad
- #8056: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-app-json-formations
- #8055: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-procfile
- #8054: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile
- #8053: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-noexpose
---
 HISTORY.md                                 | 30 +++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 56 files changed, 162 insertions(+), 132 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index acd2f157a..5d1472e3c 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,35 @@
 # History
 
+## 0.36.10
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.36.10/bootstrap.sh
+sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8063: @othercorey Use -t instead of deprecated --time in stop commands
+- #8058: @josegonzalez Ensure the pre-receive hook and URLS files are correct when cloning or renaming apps
+- #8059: @josegonzalez Expand variables for release tasks
+- #8060: @josegonzalez Use updated http2 directive for setting http2 support
+
+### Documentation
+
+- #8051: @othercorey Fix "its" in Caddy SSL configuration documentation
+
+### Dependencies
+
+- #8065: @dependabot[bot] chore(deps): bump actions/upload-artifact from 4 to 5
+- #8064: @dependabot[bot] chore(deps): bump actions/download-artifact from 5 to 6
+- #8057: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-procfile-bad
+- #8056: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-app-json-formations
+- #8055: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-procfile
+- #8054: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile
+- #8053: @dependabot[bot] chore(deps): bump node from 24-alpine to 25-alpine in /tests/apps/dockerfile-noexpose
+
 ## 0.36.9
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index a24218cda..52d35a32b 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.36.9/bootstrap.sh
-sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.36.10/bootstrap.sh
+sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index 594b14f0b..5ca00817b 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.36.9
+Version: 0.36.10
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 0314b0cd6..2ffc2bea6 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.36.9 enabled    dokku core standard plugin
-  20_events            0.36.9 enabled    dokku core events logging plugin
-  app-json             0.36.9 enabled    dokku core app-json plugin
-  apps                 0.36.9 enabled    dokku core apps plugin
-  build-env            0.36.9 enabled    dokku core build-env plugin
-  buildpacks           0.36.9 enabled    dokku core buildpacks plugin
-  certs                0.36.9 enabled    dokku core certificate management plugin
-  checks               0.36.9 enabled    dokku core checks plugin
-  common               0.36.9 enabled    dokku core common plugin
-  config               0.36.9 enabled    dokku core config plugin
-  docker-options       0.36.9 enabled    dokku core docker-options plugin
-  domains              0.36.9 enabled    dokku core domains plugin
-  enter                0.36.9 enabled    dokku core enter plugin
-  git                  0.36.9 enabled    dokku core git plugin
-  logs                 0.36.9 enabled    dokku core logs plugin
-  network              0.36.9 enabled    dokku core network plugin
-  nginx-vhosts         0.36.9 enabled    dokku core nginx-vhosts plugin
-  plugin               0.36.9 enabled    dokku core plugin plugin
-  proxy                0.36.9 enabled    dokku core proxy plugin
-  ps                   0.36.9 enabled    dokku core ps plugin
-  repo                 0.36.9 enabled    dokku core repo plugin
-  resource             0.36.9 enabled    dokku core resource plugin
-  scheduler-docker-local 0.36.9 enabled    dokku core scheduler-docker-local plugin
-  shell                0.36.9 enabled    dokku core shell plugin
-  ssh-keys             0.36.9 enabled    dokku core ssh-keys plugin
-  storage              0.36.9 enabled    dokku core storage plugin
-  tags                 0.36.9 enabled    dokku core tags plugin
-  tar                  0.36.9 enabled    dokku core tar plugin
-  trace                0.36.9 enabled    dokku core trace plugin
+  00_dokku-standard    0.36.10 enabled    dokku core standard plugin
+  20_events            0.36.10 enabled    dokku core events logging plugin
+  app-json             0.36.10 enabled    dokku core app-json plugin
+  apps                 0.36.10 enabled    dokku core apps plugin
+  build-env            0.36.10 enabled    dokku core build-env plugin
+  buildpacks           0.36.10 enabled    dokku core buildpacks plugin
+  certs                0.36.10 enabled    dokku core certificate management plugin
+  checks               0.36.10 enabled    dokku core checks plugin
+  common               0.36.10 enabled    dokku core common plugin
+  config               0.36.10 enabled    dokku core config plugin
+  docker-options       0.36.10 enabled    dokku core docker-options plugin
+  domains              0.36.10 enabled    dokku core domains plugin
+  enter                0.36.10 enabled    dokku core enter plugin
+  git                  0.36.10 enabled    dokku core git plugin
+  logs                 0.36.10 enabled    dokku core logs plugin
+  network              0.36.10 enabled    dokku core network plugin
+  nginx-vhosts         0.36.10 enabled    dokku core nginx-vhosts plugin
+  plugin               0.36.10 enabled    dokku core plugin plugin
+  proxy                0.36.10 enabled    dokku core proxy plugin
+  ps                   0.36.10 enabled    dokku core ps plugin
+  repo                 0.36.10 enabled    dokku core repo plugin
+  resource             0.36.10 enabled    dokku core resource plugin
+  scheduler-docker-local 0.36.10 enabled    dokku core scheduler-docker-local plugin
+  shell                0.36.10 enabled    dokku core shell plugin
+  ssh-keys             0.36.10 enabled    dokku core ssh-keys plugin
+  storage              0.36.10 enabled    dokku core storage plugin
+  tags                 0.36.10 enabled    dokku core tags plugin
+  tar                  0.36.10 enabled    dokku core tar plugin
+  trace                0.36.10 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index a62b1e0b8..35ae7f59e 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 25c0456dc..5c02faf86 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.9\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index e5073c762..d1e8e4223 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -33,6 +33,6 @@
     "0.33.9",
     "0.34.9",
     "0.35.20",
-    "0.36.9"
+    "0.36.10"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 540861b46..58e2f48cd 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.36.9-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.36.10-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 55fdabca2..a4a6274b6 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.36.9
+docker pull dokku/dokku:0.36.10
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.36.9
+  dokku/dokku:0.36.10
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.36.9
+    image: dokku/dokku:0.36.10
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command. Note that the version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.36.9
+FROM dokku/dokku:0.36.10
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git postgres
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git redis
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 6beb7027a..0041bf8f5 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -37,8 +37,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.36.9/bootstrap.sh
-sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.36.10/bootstrap.sh
+sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index 4684a4acb..a9ca37c4c 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.9</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.10</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.36.9 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 746ddac82..e11ca3887 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.9/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 745bb874a..5efe07d56 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index 6a5d5bbd1..3a7ca0f6e 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index 14a1a0a3a..73acebbf3 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index 4ba80616b..434eb47b2 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index a611b97c8..f18a3f484 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index 6ec2d13c1..1595a4049 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index eddc974d1..a539a53fc 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index 24481ae53..db6be7910 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 3927b3f2c..a331b9f2d 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 2f1762fd5..206aab83e 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 8439349a2..54de76e7a 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index 94e01ad3d..71cc6cad7 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index 527ade176..28fe006d7 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 058344880..9c31fa576 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 3f1284e73..3371fff1a 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index b326a92c5..f875f0f38 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 2a0c669d8..63b92ae4e 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index df1dff07a..3f68a3557 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index c3bdd9e57..1629bca64 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 4482ed6de..f6e8fafa3 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index e1f7a79b4..b2b160831 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index fadc2beee..ab51b85ef 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index c6facc654..5a66a4b5f 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index 1f4dc8da0..c4dae9c8c 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index 6369bf137..e2f38cb06 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 89e45057d..57d197c43 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 8a4cc62af..cb3c982f2 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 4092a0c3a..239e629a9 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index c80be967e..c3a1f1878 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 57a589f76..9561194af 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index b09a7042a..a129136ca 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index 9f9293aaa..7a82a7ffc 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index 7df31bbbc..17a6e6735 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 8eeff2c62..7cc4dbf3f 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 48a5ce94c..c25aec017 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 39c194fca..c10cc110a 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index 5dc4ce15a..12f9bc057 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index 7ee0dc357..653c4dbb6 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 6abc21aa5..9378cfe06 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 0681983f4..343e4f7e9 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 02a3459d1..05406a668 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 41b4cc63b..c312f05cb 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 01c7c4e4d..127d8dd78 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 3e9494f6d..1b28a2aaf 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.36.9"
+version = "0.36.10"
 [plugin.config]

From e88df23fdbde51de000df74af762529897df8909 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Oct 2025 13:13:09 +0000
Subject: [PATCH 048/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.29 to 2.11.30.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.30/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.29...v2.11.30)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod |  4 ++--
 plugins/scheduler-k3s/go.sum | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 0e66249a5..8db07235e 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.0
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.29
+	github.com/traefik/traefik/v2 v2.11.30
 	golang.org/x/sync v0.17.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.0
@@ -146,7 +146,7 @@ require (
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.43.0 // indirect
 	golang.org/x/mod v0.28.0 // indirect
-	golang.org/x/net v0.45.0 // indirect
+	golang.org/x/net v0.46.0 // indirect
 	golang.org/x/oauth2 v0.31.0 // indirect
 	golang.org/x/sys v0.37.0 // indirect
 	golang.org/x/term v0.36.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ea64f578e..323cfdb1b 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -343,8 +343,8 @@ github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.29 h1:Hgz7MI6mVVFp/IlKQnUNgIQuzMynW7g+D2jUeOek1M4=
-github.com/traefik/traefik/v2 v2.11.29/go.mod h1:rj7DUWAe5LntiYwhJCjeXecrpBVMvsZ16WryOGSrPJ4=
+github.com/traefik/traefik/v2 v2.11.30 h1:Jkb5H8aI9lKQY/DDqwK3JP7iNUEnRfNLWXsr3azFf8w=
+github.com/traefik/traefik/v2 v2.11.30/go.mod h1:JNjmJuYf3VeE0XotmZKUcqqPVrVSZ2sdRqvht/ssOqk=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=
@@ -384,8 +384,8 @@ go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.32.0 h1:SZmDnHcgp3zwlP
 go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.32.0/go.mod h1:fdWW0HtZJ7+jNpTKUR0GpMEDP69nR8YBJQxNiVCE3jk=
 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.37.0 h1:SNhVp/9q4Go/XHBkQ1/d5u9P/U+L1yaGPoi0x+mStaI=
 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.37.0/go.mod h1:tx8OOlGH6R4kLV67YaYO44GFXloEjGPZuMjEkaaqIp4=
-go.opentelemetry.io/otel/log v0.8.0 h1:egZ8vV5atrUWUbnSsHn6vB8R21G2wrKqNiDt3iWertk=
-go.opentelemetry.io/otel/log v0.8.0/go.mod h1:M9qvDdUTRCopJcGRKg57+JSQ9LgLBrwwfC32epk5NX8=
+go.opentelemetry.io/otel/log v0.11.0 h1:c24Hrlk5WJ8JWcwbQxdBqxZdOK7PcP/LFtOtwpDTe3Y=
+go.opentelemetry.io/otel/log v0.11.0/go.mod h1:U/sxQ83FPmT29trrifhQg+Zj2lo1/IPN1PF6RTFqdwc=
 go.opentelemetry.io/otel/metric v1.37.0 h1:mvwbQS5m0tbmqML4NqK+e3aDiO02vsf/WgbsdpcPoZE=
 go.opentelemetry.io/otel/metric v1.37.0/go.mod h1:04wGrZurHYKOc+RKeye86GwKiTb9FKm1WHtO+4EVr2E=
 go.opentelemetry.io/otel/sdk v1.37.0 h1:ItB0QUqnjesGRvNcmAcU0LyvkVyGJ2xftD29bWdDvKI=
@@ -443,8 +443,8 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
 golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
+golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
 golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo=
 golang.org/x/oauth2 v0.31.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

From 0ea265f832de7362ead0bc85b79e2ed1fc408ed4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 29 Oct 2025 13:11:49 +0000
Subject: [PATCH 049/427] chore(deps): bump traefik from 3.5.3 to 3.5.4 in
 /plugins/traefik-vhosts

Bumps traefik from 3.5.3 to 3.5.4.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index 8c5f38c88..573541f50 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.5.3
+FROM traefik:3.5.4

From 88b1b1849447a26df79b8533355e133b13407031 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Oct 2025 13:31:23 +0000
Subject: [PATCH 050/427] chore(deps): bump github.com/kedacore/keda/v2 in
 /plugins/scheduler-k3s

Bumps [github.com/kedacore/keda/v2](https://github.com/kedacore/keda) from 2.18.0 to 2.18.1.
- [Release notes](https://github.com/kedacore/keda/releases)
- [Changelog](https://github.com/kedacore/keda/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kedacore/keda/compare/v2.18.0...v2.18.1)

---
updated-dependencies:
- dependency-name: github.com/kedacore/keda/v2
  dependency-version: 2.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 8db07235e..92e54042f 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -19,7 +19,7 @@ require (
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
-	github.com/kedacore/keda/v2 v2.18.0
+	github.com/kedacore/keda/v2 v2.18.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	github.com/traefik/traefik/v2 v2.11.30
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 323cfdb1b..2e40216e9 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -194,8 +194,8 @@ github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnr
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
-github.com/kedacore/keda/v2 v2.18.0 h1:ttR223fii/4QJ0YvtrhcWHaEoezByb/t5CeFopjl6EI=
-github.com/kedacore/keda/v2 v2.18.0/go.mod h1:pw+qlQwMzj3T8LMayUnOtT15Gt1yRPF3lS1r5rt9F5k=
+github.com/kedacore/keda/v2 v2.18.1 h1:h6bRt/IOxxtZpJlHSqhdH/lcInH7Z9obxg/JvWOmGAw=
+github.com/kedacore/keda/v2 v2.18.1/go.mod h1:gCYj1eF0aIy4aSlGgImeydgueBP2ThZMS1wkbRLfiW4=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=

From 7e68b6510344d09d52faea73605e7e5768d08488 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Nov 2025 13:13:06 +0000
Subject: [PATCH 051/427] chore(deps): bump mkdocs-material from 9.6.22 to
 9.6.23 in /docs/_build

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.6.22 to 9.6.23.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.22...9.6.23)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.6.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index f2c48f0c2..3a83b8c4c 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -8,7 +8,7 @@ MarkupSafe==3.0.3
 mergedeep==1.3.4
 mkdocs==1.6.1
 mkdocs-exclude==1.0.2
-mkdocs-material==9.6.22
+mkdocs-material==9.6.23
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2

From ff1acd09f5f34c8a7f5fc40f497dc0fa93601a91 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 4 Nov 2025 13:06:53 +0000
Subject: [PATCH 052/427] chore(deps): update markdown requirement in
 /docs/_build

Updates the requirements on [markdown](https://github.com/Python-Markdown/markdown) to permit the latest version.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.2.1...3.10.0)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: '3.10'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 3a83b8c4c..b71a1f74b 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -3,7 +3,7 @@ click==8.3.0
 ghp-import==2.1.0
 importlib-metadata==8.7.0
 Jinja2==3.1.6
-Markdown>=3.2.1,<3.10
+Markdown>=3.2.1,<3.11
 MarkupSafe==3.0.3
 mergedeep==1.3.4
 mkdocs==1.6.1

From f4b946e32dbad5abbcf14fe46c798a4bbcf93a2f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 5 Nov 2025 13:10:51 +0000
Subject: [PATCH 053/427] chore(deps): bump timberio/vector in /plugins/logs

Bumps timberio/vector from 0.50.0-debian to 0.51.0-debian.

---
updated-dependencies:
- dependency-name: timberio/vector
  dependency-version: 0.51.0-debian
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/logs/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/logs/Dockerfile b/plugins/logs/Dockerfile
index d4bfdb8a3..35920604a 100644
--- a/plugins/logs/Dockerfile
+++ b/plugins/logs/Dockerfile
@@ -1 +1 @@
-FROM timberio/vector:0.50.0-debian
+FROM timberio/vector:0.51.0-debian

From 8202bd37d46feb6bbe3c4fca78fc3aea4fa43ca3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 5 Nov 2025 20:21:30 +0000
Subject: [PATCH 054/427] chore(deps): bump django in
 /tests/apps/dockerfile-release

Bumps [django](https://github.com/django/django) from 5.2.7 to 5.2.8.
- [Commits](https://github.com/django/django/compare/5.2.7...5.2.8)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index cbeb0144c..a66766a83 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -34,12 +34,12 @@
         },
         "django": {
             "hashes": [
-                "sha256:59a13a6515f787dec9d97a0438cd2efac78c8aca1c80025244b0fe507fe0754b",
-                "sha256:e0f6f12e2551b1716a95a63a1366ca91bbcd7be059862c1b18f989b1da356cdd"
+                "sha256:23254866a5bb9a2cfa6004e8b809ec6246eba4b58a7589bc2772f1bcc8456c7f",
+                "sha256:37e687f7bd73ddf043e2b6b97cfe02fcbb11f2dbb3adccc6a2b18c6daa054d7f"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.2.7"
+            "version": "==5.2.8"
         },
         "djangorestframework": {
             "hashes": [

From 78f179437386f13e647fc9b34c37036a150aaad6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 13:05:16 +0000
Subject: [PATCH 055/427] chore(deps): bump golang in
 /tests/apps/go-fail-postdeploy

Bumps golang from 1.25.3 to 1.25.4.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-postdeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-postdeploy/Dockerfile b/tests/apps/go-fail-postdeploy/Dockerfile
index 3bd2c040b..2669b78d4 100644
--- a/tests/apps/go-fail-postdeploy/Dockerfile
+++ b/tests/apps/go-fail-postdeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.3
+FROM golang:1.25.4
 
 EXPOSE 3000/tcp
 

From 47bf471698f965d45919d023486605c24a47c429 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 13:05:17 +0000
Subject: [PATCH 056/427] chore(deps): bump golang from 1.25.3 to 1.25.4 in
 /tests/apps/gogrpc

Bumps golang from 1.25.3 to 1.25.4.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/gogrpc/Dockerfile b/tests/apps/gogrpc/Dockerfile
index 98d2c5d4e..fc64ee93c 100644
--- a/tests/apps/gogrpc/Dockerfile
+++ b/tests/apps/gogrpc/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.3
+FROM golang:1.25.4
 
 RUN mkdir /app
 WORKDIR /app

From d3687cf7f4537bd21b74344ce64fef4c64ab6bc5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 13:05:17 +0000
Subject: [PATCH 057/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-no-tini

Bumps golang from 1.25.3 to 1.25.4.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-no-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-no-tini/Dockerfile b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
index 8c7938d4c..b76de5e66 100644
--- a/tests/apps/zombies-dockerfile-no-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.3
+FROM golang:1.25.4
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 6757759b15d6c34fbcd51e856114cc18f440a60d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 13:05:19 +0000
Subject: [PATCH 058/427] chore(deps): bump golang in
 /tests/apps/go-fail-predeploy

Bumps golang from 1.25.3 to 1.25.4.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-predeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-predeploy/Dockerfile b/tests/apps/go-fail-predeploy/Dockerfile
index 3bd2c040b..2669b78d4 100644
--- a/tests/apps/go-fail-predeploy/Dockerfile
+++ b/tests/apps/go-fail-predeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.3
+FROM golang:1.25.4
 
 EXPOSE 3000/tcp
 

From 34985adb4330f64cd3bad3ab058c25ee43ee9018 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 13:05:20 +0000
Subject: [PATCH 059/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-tini

Bumps golang from 1.25.3 to 1.25.4.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-tini/Dockerfile b/tests/apps/zombies-dockerfile-tini/Dockerfile
index 8d708509c..a28465551 100644
--- a/tests/apps/zombies-dockerfile-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.3
+FROM golang:1.25.4
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From f88c427a4120fd57d33c2005284b6c5e362cb328 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 15:25:56 +0000
Subject: [PATCH 060/427] chore(deps): bump github.com/containerd/containerd

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.28 to 1.7.29.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.28...v1.7.29)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.29
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 92e54042f..79ce1f627 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -51,7 +51,7 @@ require (
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/chai2010/gettext-go v1.0.3 // indirect
-	github.com/containerd/containerd v1.7.28 // indirect
+	github.com/containerd/containerd v1.7.29 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v1.0.0-rc.1 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2e40216e9..baa72c657 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -42,8 +42,8 @@ github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UF
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chai2010/gettext-go v1.0.3 h1:9liNh8t+u26xl5ddmWLmsOsdNLwkdRTg5AG+JnTiM80=
 github.com/chai2010/gettext-go v1.0.3/go.mod h1:y+wnP2cHYaVj19NZhYKAwEMH2CI1gNHeQQ+5AjwawxA=
-github.com/containerd/containerd v1.7.28 h1:Nsgm1AtcmEh4AHAJ4gGlNSaKgXiNccU270Dnf81FQ3c=
-github.com/containerd/containerd v1.7.28/go.mod h1:azUkWcOvHrWvaiUjSQH0fjzuHIwSPg1WL5PshGP4Szs=
+github.com/containerd/containerd v1.7.29 h1:90fWABQsaN9mJhGkoVnuzEY+o1XDPbg9BTC9QTAHnuE=
+github.com/containerd/containerd v1.7.29/go.mod h1:azUkWcOvHrWvaiUjSQH0fjzuHIwSPg1WL5PshGP4Szs=
 github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=
 github.com/containerd/errdefs v1.0.0/go.mod h1:+YBYIdtsnF4Iw6nWZhJcqGSg/dwvV7tyJ/kCkyJ2k+M=
 github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=

From c52e947df1de75538514dd440e7b5cd039aa017b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 7 Nov 2025 22:17:13 -0500
Subject: [PATCH 061/427] fix: error out if the appname or app.json is missing
 when retrieving cron entries

---
 plugins/cron/cron.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index 12754f846..52f8c85a0 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -79,6 +79,10 @@ func FetchCronEntries(input FetchCronEntriesInput) ([]TemplateCommand, error) {
 	commands := []TemplateCommand{}
 	isMaintenance := reportComputedMaintenance(appName) == "true"
 
+	if input.AppJSON == nil && input.AppName == "" {
+		return commands, fmt.Errorf("Missing app name or app.json")
+	}
+
 	if input.AppJSON == nil {
 		appJSON, err := appjson.GetAppJSON(appName)
 		if err != nil {

From 3915d25d8447ade405f473edba3a7c77c06bb636 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 7 Nov 2025 22:30:54 -0500
Subject: [PATCH 062/427] refactor: rename cron entry to cron task

This naming better suits what it is we are fetching.
---
 docs/appendices/0.23.0-migration-guide.md   |  2 +-
 docs/development/plugin-triggers.md         |  4 +--
 docs/processes/scheduled-cron-tasks.md      |  6 ++--
 plugins/cron/cron.go                        | 12 +++----
 plugins/cron/report.go                      |  2 +-
 plugins/cron/subcommands.go                 | 20 +++++------
 plugins/cron/templates/cron.tmpl            |  4 +--
 plugins/cron/triggers.go                    |  4 +--
 plugins/scheduler-docker-local/functions.go | 10 +++---
 plugins/scheduler-docker-local/triggers.go  |  2 +-
 plugins/scheduler-k3s/triggers.go           | 40 ++++++++++-----------
 11 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/docs/appendices/0.23.0-migration-guide.md b/docs/appendices/0.23.0-migration-guide.md
index b46cb8bc4..2853eafde 100644
--- a/docs/appendices/0.23.0-migration-guide.md
+++ b/docs/appendices/0.23.0-migration-guide.md
@@ -4,5 +4,5 @@
 
 - The `plugin:list` command no longer outputs the version for the `plugn` binary.
 - Users building docker images that run Dokku will need to use a new sudoer wrapper for the `docker-image-labeler` binary to work correctly. A reference version has been placed in the `docker` skeleton directory. This should only impact platform developers, and users of our Docker image will already have the file available.
-- The `dokku` user's cron is now in use by Dokku itself. Customizations will be overwritten. Users are encouraged to use a cron entry in `/etc/cron.d/dokku` to avoid this issue.
+- The `dokku` user's cron is now in use by Dokku itself. Customizations will be overwritten. Users are encouraged to use a cron file at `/etc/cron.d/dokku` to avoid this issue.
 - As of 0.23.0, Dokku will now inject the `max-size` log driver option for applications. This is restricted to app-configured log driver values empty, `local` or `json-file` in 0.23.1 to increase setup compatibility. Users who configure alternative log drivers at the system level will need to either set the global `max-size` property to `unlimited` or switch to the built-in `vector` logging support.
diff --git a/docs/development/plugin-triggers.md b/docs/development/plugin-triggers.md
index 43bbab731..1d202951c 100644
--- a/docs/development/plugin-triggers.md
+++ b/docs/development/plugin-triggers.md
@@ -582,7 +582,7 @@ APP="$1"; PROPERTY="$2"
 
 ### `cron-entries`
 
-- Description: Allows injecting cron entries into the written out scheduled cron task list. Each entry is newline delimited, and individual entries come in the form `$SCHEDULE;$FULL_COMMAND;$ARBITRARY_DATA`. Individual implementations of cron writing can decide whether and how to include these cron entries. The `ARBITRARY_DATA` includes the log file path for the basic `docker-local` cron implementation.
+- Description: Allows injecting cron tasks into the written out scheduled cron task list. Each entry is newline delimited, and individual tasks come in the form `$SCHEDULE;$FULL_COMMAND;$ARBITRARY_DATA`. Individual implementations of cron writing can decide whether and how to include these cron tasks. The `ARBITRARY_DATA` includes the log file path for the basic `docker-local` cron implementation.
 - Invoked by:
 - Arguments: `$DOKKU_SCHEDULER`
 - Example:
@@ -2450,7 +2450,7 @@ DOKKU_SCHEDULER="$1"; APP="$2";
 > The scheduler plugin trigger apis are under development and may change
 > between minor releases until the 1.0 release.
 
-- Description: Force triggers writing out cron entries. Arguments are optional.
+- Description: Force triggers writing out cron tasks. Arguments are optional.
 - Invoked by: `ps:start`, `ps:stop`, `cron:set`
 - Arguments: `$DOKKU_SCHEDULER $APP`
 - Example:
diff --git a/docs/processes/scheduled-cron-tasks.md b/docs/processes/scheduled-cron-tasks.md
index 76c3f2232..0fe1d3cbe 100644
--- a/docs/processes/scheduled-cron-tasks.md
+++ b/docs/processes/scheduled-cron-tasks.md
@@ -31,12 +31,12 @@ The `app.json` file for a given app can define a special `cron` key that contain
 }
 ```
 
-A cron entry takes the following properties:
+A cron task takes the following properties:
 
 - `command`: A command to be run within the built app image. Specified commands can also be `Procfile` entries.
 - `schedule`: A [cron-compatible](https://en.wikipedia.org/wiki/Cron#Overview) scheduling definition upon which to run the command. Seconds are generally not supported.
 
-Zero or more cron commands can be specified per app. Cron entries are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
+Zero or more cron commands can be specified per app. Cron tasks are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
 
 See the [app.json location documentation](/docs/advanced-usage/deployment-tasks.md#changing-the-appjson-location) for more information on where to place your `app.json` file.
 
@@ -218,7 +218,7 @@ For tasks that will properly resume, you _should_ use the above method, as runni
 
 Regularly scheduled tasks can be a bit of a pain with Dokku. The following are general recommendations to follow to help ensure successful task runs.
 
-- Use the `dokku` user in your cron entry.
+- Use the `dokku` user in your cron task.
     - If you do not, the `dokku` binary will attempt to execute with `sudo`, and your cron run with fail with `sudo: no tty present and no askpass program specified`.
 - Add a `MAILTO` environment variable to ship cron emails to yourself.
 - Add a `PATH` environment variable or specify the full path to binaries on the host.
diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index 12754f846..f5a74e0bd 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -66,15 +66,15 @@ func (t TemplateCommand) CronCommand() string {
 	return fmt.Sprintf("dokku run --cron-id %s %s %s", t.ID, t.App, t.Command)
 }
 
-// FetchCronEntriesInput is the input for the FetchCronEntries function
-type FetchCronEntriesInput struct {
+// FetchCronTasksInput is the input for the FetchCronTasks function
+type FetchCronTasksInput struct {
 	AppName       string
 	AppJSON       *appjson.AppJSON
 	WarnToFailure bool
 }
 
-// FetchCronEntries returns a list of cron commands for a given app
-func FetchCronEntries(input FetchCronEntriesInput) ([]TemplateCommand, error) {
+// FetchCronTasks returns a list of cron commands for a given app
+func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 	appName := input.AppName
 	commands := []TemplateCommand{}
 	isMaintenance := reportComputedMaintenance(appName) == "true"
@@ -129,10 +129,10 @@ func FetchCronEntries(input FetchCronEntriesInput) ([]TemplateCommand, error) {
 	return commands, nil
 }
 
-// FetchGlobalCronEntries returns a list of global cron commands
+// FetchGlobalCronTasks returns a list of global cron commands
 // This function should only be used for the cron:list --global command
 // and not internally by the cron plugin
-func FetchGlobalCronEntries() ([]TemplateCommand, error) {
+func FetchGlobalCronTasks() ([]TemplateCommand, error) {
 	commands := []TemplateCommand{}
 	response, _ := common.CallPlugnTrigger(common.PlugnTriggerInput{
 		Trigger: "cron-entries",
diff --git a/plugins/cron/report.go b/plugins/cron/report.go
index 3514b8f53..acf9760cb 100644
--- a/plugins/cron/report.go
+++ b/plugins/cron/report.go
@@ -41,7 +41,7 @@ func reportMailto(_ string) string {
 }
 
 func reportTasks(appName string) string {
-	c, _ := FetchCronEntries(FetchCronEntriesInput{AppName: appName})
+	c, _ := FetchCronTasks(FetchCronTasksInput{AppName: appName})
 	return strconv.Itoa(len(c))
 }
 
diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index f8d0e941e..5b7057619 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -22,10 +22,10 @@ func CommandList(appName string, format string) error {
 		return fmt.Errorf("Invalid format specified, supported formats: json, stdout")
 	}
 
-	var entries []TemplateCommand
+	var tasks []TemplateCommand
 	if appName == "--global" {
 		var err error
-		entries, err = FetchGlobalCronEntries()
+		tasks, err = FetchGlobalCronTasks()
 		if err != nil {
 			return err
 		}
@@ -34,7 +34,7 @@ func CommandList(appName string, format string) error {
 		if err := common.VerifyAppName(appName); err != nil {
 			return err
 		}
-		entries, err = FetchCronEntries(FetchCronEntriesInput{AppName: appName})
+		tasks, err = FetchCronTasks(FetchCronTasksInput{AppName: appName})
 		if err != nil {
 			return err
 		}
@@ -42,8 +42,8 @@ func CommandList(appName string, format string) error {
 
 	if format == "stdout" {
 		output := []string{"ID | Schedule | Maintenance | Command"}
-		for _, entry := range entries {
-			output = append(output, fmt.Sprintf("%s | %s | %t | %s", entry.ID, entry.Schedule, entry.Maintenance, entry.Command))
+		for _, task := range tasks {
+			output = append(output, fmt.Sprintf("%s | %s | %t | %s", task.ID, task.Schedule, task.Maintenance, task.Command))
 		}
 
 		result := columnize.SimpleFormat(output)
@@ -51,7 +51,7 @@ func CommandList(appName string, format string) error {
 		return nil
 	}
 
-	out, err := json.Marshal(entries)
+	out, err := json.Marshal(tasks)
 	if err != nil {
 		return err
 	}
@@ -88,7 +88,7 @@ func CommandRun(appName string, cronID string, detached bool) error {
 		return err
 	}
 
-	entries, err := FetchCronEntries(FetchCronEntriesInput{AppName: appName})
+	tasks, err := FetchCronTasks(FetchCronTasksInput{AppName: appName})
 	if err != nil {
 		return err
 	}
@@ -98,9 +98,9 @@ func CommandRun(appName string, cronID string, detached bool) error {
 	}
 
 	command := ""
-	for _, entry := range entries {
-		if entry.ID == cronID {
-			command = entry.Command
+	for _, task := range tasks {
+		if task.ID == cronID {
+			command = task.Command
 		}
 	}
 
diff --git a/plugins/cron/templates/cron.tmpl b/plugins/cron/templates/cron.tmpl
index 5c510dcae..c38d40499 100644
--- a/plugins/cron/templates/cron.tmpl
+++ b/plugins/cron/templates/cron.tmpl
@@ -7,6 +7,6 @@ MAILTO={{ .Mailto }}
 PATH=/usr/local/bin:/usr/bin:/bin
 SHELL=/bin/bash
 
-{{ range $entry := .Commands -}}
-{{ $entry.Schedule }} {{ $entry.CronCommand }}
+{{ range $task := .Commands -}}
+{{ $task.Schedule }} {{ $task.CronCommand }}
 {{ end -}}
diff --git a/plugins/cron/triggers.go b/plugins/cron/triggers.go
index 499405913..e19097bbd 100644
--- a/plugins/cron/triggers.go
+++ b/plugins/cron/triggers.go
@@ -24,7 +24,7 @@ func TriggerCronGetProperty(appName string, key string) error {
 	return nil
 }
 
-// TriggerAppJSONIsValid validates the cron entries for a given app
+// TriggerAppJSONIsValid validates the cron tasks for a given app
 func TriggerAppJSONIsValid(appName string, appJSONPath string) error {
 	if !common.FileExists(appJSONPath) {
 		return nil
@@ -35,7 +35,7 @@ func TriggerAppJSONIsValid(appName string, appJSONPath string) error {
 		return err
 	}
 
-	_, err = FetchCronEntries(FetchCronEntriesInput{
+	_, err = FetchCronTasks(FetchCronTasksInput{
 		AppName:       appName,
 		AppJSON:       &appJSON,
 		WarnToFailure: true,
diff --git a/plugins/scheduler-docker-local/functions.go b/plugins/scheduler-docker-local/functions.go
index e11d7c035..316192d31 100644
--- a/plugins/scheduler-docker-local/functions.go
+++ b/plugins/scheduler-docker-local/functions.go
@@ -38,7 +38,7 @@ func deleteCrontab() error {
 	return nil
 }
 
-func generateCronEntries() ([]cron.TemplateCommand, error) {
+func generateCronTasks() ([]cron.TemplateCommand, error) {
 	apps, _ := common.UnfilteredDokkuApps()
 
 	g := new(errgroup.Group)
@@ -52,7 +52,7 @@ func generateCronEntries() ([]cron.TemplateCommand, error) {
 				return nil
 			}
 
-			c, err := cron.FetchCronEntries(cron.FetchCronEntriesInput{AppName: appName})
+			c, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
 			if err != nil {
 				results <- []cron.TemplateCommand{}
 				common.LogWarn(err.Error())
@@ -116,13 +116,13 @@ func generateCronEntries() ([]cron.TemplateCommand, error) {
 	return commands, nil
 }
 
-func writeCronEntries(scheduler string) error {
+func writeCronTasks(scheduler string) error {
 	// allow empty scheduler, which means all apps (used by letsencrypt)
 	if scheduler != "docker-local" && scheduler != "" {
 		return nil
 	}
 
-	commands, err := generateCronEntries()
+	commands, err := generateCronTasks()
 	if err != nil {
 		return err
 	}
@@ -154,7 +154,7 @@ func writeCronEntries(scheduler string) error {
 		return err
 	}
 
-	tmpFile, err := os.CreateTemp(os.TempDir(), fmt.Sprintf("dokku-%s-%s", common.MustGetEnv("DOKKU_PID"), "WriteCronEntries"))
+	tmpFile, err := os.CreateTemp(os.TempDir(), fmt.Sprintf("dokku-%s-%s", common.MustGetEnv("DOKKU_PID"), "WriteCronTasks"))
 	if err != nil {
 		return fmt.Errorf("Cannot create temporary schedule file: %v", err)
 	}
diff --git a/plugins/scheduler-docker-local/triggers.go b/plugins/scheduler-docker-local/triggers.go
index 4f9fded0d..3bd78229d 100644
--- a/plugins/scheduler-docker-local/triggers.go
+++ b/plugins/scheduler-docker-local/triggers.go
@@ -2,5 +2,5 @@ package schedulerdockerlocal
 
 // TriggerSchedulerCronWrite force updates the cron file for all apps
 func TriggerSchedulerCronWrite(scheduler string) error {
-	return writeCronEntries(scheduler)
+	return writeCronTasks(scheduler)
 }
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index b89aa017c..5be47ea33 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -312,15 +312,15 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 
 	workingDir := common.GetWorkingDir(appName, image)
 
-	allCronEntries, err := cron.FetchCronEntries(cron.FetchCronEntriesInput{AppName: appName})
+	allCronTasks, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
 	if err != nil {
-		return fmt.Errorf("Error fetching cron entries: %w", err)
+		return fmt.Errorf("Error fetching cron tasks: %w", err)
 	}
-	// remove maintenance cron entries
-	cronEntries := []cron.TemplateCommand{}
-	for _, cronEntry := range allCronEntries {
-		if !cronEntry.Maintenance {
-			cronEntries = append(cronEntries, cronEntry)
+	// remove maintenance cron tasks
+	cronTasks := []cron.TemplateCommand{}
+	for _, cronTask := range allCronTasks {
+		if !cronTask.Maintenance {
+			cronTasks = append(cronTasks, cronTask)
 		}
 	}
 
@@ -605,13 +605,13 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 	if err != nil {
 		return fmt.Errorf("Error listing cron jobs: %w", err)
 	}
-	for _, cronEntry := range cronEntries {
+	for _, cronTask := range cronTasks {
 		// todo: implement deployment annotations
 		// todo: implement pod annotations
 		// todo: implement volumes
 		suffix := ""
 		for _, cronJob := range cronJobs {
-			if cronJob.Labels["dokku.com/cron-id"] == cronEntry.ID {
+			if cronJob.Labels["dokku.com/cron-id"] == cronTask.ID {
 				var ok bool
 				suffix, ok = cronJob.Annotations["dokku.com/job-suffix"]
 				if !ok {
@@ -628,22 +628,22 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 			suffix = strings.ToLower(fmt.Sprintf("%X", b))
 		}
 
-		words, err := shellquote.Split(cronEntry.Command)
+		words, err := shellquote.Split(cronTask.Command)
 		if err != nil {
 			return fmt.Errorf("Error parsing cron command: %w", err)
 		}
 
-		processResources, err := getProcessResources(appName, cronEntry.ID)
+		processResources, err := getProcessResources(appName, cronTask.ID)
 		if err != nil {
 			return fmt.Errorf("Error getting process resources: %w", err)
 		}
 
-		annotations, err := getAnnotations(appName, cronEntry.ID)
+		annotations, err := getAnnotations(appName, cronTask.ID)
 		if err != nil {
 			return fmt.Errorf("Error getting process annotations: %w", err)
 		}
 
-		labels, err := getLabels(appName, cronEntry.ID)
+		labels, err := getLabels(appName, cronTask.ID)
 		if err != nil {
 			return fmt.Errorf("Error getting process labels: %w", err)
 		}
@@ -652,8 +652,8 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 			Args:        words,
 			Annotations: annotations,
 			Cron: ProcessCron{
-				ID:       cronEntry.ID,
-				Schedule: cronEntry.Schedule,
+				ID:       cronTask.ID,
+				Schedule: cronTask.Schedule,
 				Suffix:   suffix,
 			},
 			Labels:      labels,
@@ -662,10 +662,10 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 			Resources:   processResources,
 			Volumes:     processVolumes,
 		}
-		values.Processes[cronEntry.ID] = processValues
+		values.Processes[cronTask.ID] = processValues
 	}
 
-	if len(cronEntries) > 0 {
+	if len(cronTasks) > 0 {
 		b, err := templates.ReadFile("templates/chart/cron-job.yaml")
 		if err != nil {
 			return fmt.Errorf("Error reading cron job template: %w", err)
@@ -1443,14 +1443,14 @@ func TriggerSchedulerRunList(scheduler string, appName string, format string) er
 		return fmt.Errorf("Error getting cron jobs: %w", err)
 	}
 
-	type CronJobEntry struct {
+	type CronJobTask struct {
 		ID       string `json:"id"`
 		AppName  string `json:"app"`
 		Command  string `json:"command"`
 		Schedule string `json:"schedule"`
 	}
 
-	data := []CronJobEntry{}
+	data := []CronJobTask{}
 	lines := []string{"ID | Schedule | Command"}
 	for _, cronJob := range cronJobs {
 		command := ""
@@ -1467,7 +1467,7 @@ func TriggerSchedulerRunList(scheduler string, appName string, format string) er
 		}
 
 		lines = append(lines, fmt.Sprintf("%s | %s | %s", cronID, cronJob.Spec.Schedule, command))
-		data = append(data, CronJobEntry{
+		data = append(data, CronJobTask{
 			ID:       cronID,
 			AppName:  appName,
 			Command:  command,

From b598af67b944606abef7e887e8140d204da9a571 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 7 Nov 2025 22:32:44 -0500
Subject: [PATCH 063/427] refactor: rename CronCommand to DokkuRunCommand

This better reflects what it does.
---
 plugins/cron/cron.go             | 4 ++--
 plugins/cron/templates/cron.tmpl | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index f5a74e0bd..6d0025ff7 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -54,8 +54,8 @@ type TemplateCommand struct {
 	Maintenance bool `json:"maintenance"`
 }
 
-// CronCommand returns the command to run for a given cron command
-func (t TemplateCommand) CronCommand() string {
+// DokkuRunCommand returns the dokku run command to execute for a given cron task
+func (t TemplateCommand) DokkuRunCommand() string {
 	if t.AltCommand != "" {
 		if t.LogFile != "" {
 			return fmt.Sprintf("%s &>> %s", t.AltCommand, t.LogFile)
diff --git a/plugins/cron/templates/cron.tmpl b/plugins/cron/templates/cron.tmpl
index c38d40499..3f186e97b 100644
--- a/plugins/cron/templates/cron.tmpl
+++ b/plugins/cron/templates/cron.tmpl
@@ -8,5 +8,5 @@ PATH=/usr/local/bin:/usr/bin:/bin
 SHELL=/bin/bash
 
 {{ range $task := .Commands -}}
-{{ $task.Schedule }} {{ $task.CronCommand }}
+{{ $task.Schedule }} {{ $task.DokkuRunCommand }}
 {{ end -}}

From 82cab643a8265554169f78121677874e2878b579 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 7 Nov 2025 22:36:00 -0500
Subject: [PATCH 064/427] chore: standardize on cron task vs any other naming

---
 docs/processes/scheduled-cron-tasks.md |  2 +-
 plugins/app-json/appjson.go            |  8 ++++----
 plugins/cron/cron.go                   | 20 ++++++++++----------
 plugins/cron/subcommands.go            |  2 +-
 plugins/scheduler-k3s/triggers.go      |  2 +-
 5 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/docs/processes/scheduled-cron-tasks.md b/docs/processes/scheduled-cron-tasks.md
index 0fe1d3cbe..f647b6edb 100644
--- a/docs/processes/scheduled-cron-tasks.md
+++ b/docs/processes/scheduled-cron-tasks.md
@@ -36,7 +36,7 @@ A cron task takes the following properties:
 - `command`: A command to be run within the built app image. Specified commands can also be `Procfile` entries.
 - `schedule`: A [cron-compatible](https://en.wikipedia.org/wiki/Cron#Overview) scheduling definition upon which to run the command. Seconds are generally not supported.
 
-Zero or more cron commands can be specified per app. Cron tasks are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
+Zero or more cron tasks can be specified per app. Cron tasks are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
 
 See the [app.json location documentation](/docs/advanced-usage/deployment-tasks.md#changing-the-appjson-location) for more information on where to place your `app.json` file.
 
diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index 75f0ccced..d251da4ea 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -25,8 +25,8 @@ var (
 
 // AppJSON is a struct that represents an app.json file as understood by Dokku
 type AppJSON struct {
-	// Cron is a list of cron commands to execute
-	Cron []CronCommand `json:"cron"`
+	// Cron is a list of cron tasks to execute
+	Cron []CronTask `json:"cron"`
 
 	// Formation is a map of process types to scale
 	Formation map[string]Formation `json:"formation"`
@@ -50,8 +50,8 @@ type AppJSON struct {
 	} `json:"scripts"`
 }
 
-// CronCommand is a struct that represents a single cron command from an app.json file
-type CronCommand struct {
+// CronTask is a struct that represents a single cron task from an app.json file
+type CronTask struct {
 	// Command is the command to execute
 	Command string `json:"command"`
 
diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index 6d0025ff7..d1f19015e 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -27,18 +27,18 @@ var (
 	}
 )
 
-// TemplateCommand is a struct that represents a cron command
+// TemplateCommand is a struct that represents a cron task
 type TemplateCommand struct {
-	// ID is a unique identifier for the cron command
+	// ID is a unique identifier for the cron task
 	ID string `json:"id"`
 
-	// App is the app the cron command belongs to
+	// App is the app the cron task belongs to
 	App string `json:"app,omitempty"`
 
 	// Command is the command to run
 	Command string `json:"command"`
 
-	// Global is whether the cron command is global
+	// Global is whether the cron task is global
 	Global bool `json:"global,omitempty"`
 
 	// Schedule is the cron schedule
@@ -50,7 +50,7 @@ type TemplateCommand struct {
 	// LogFile is the log file to write to
 	LogFile string `json:"-"`
 
-	// Maintenance is whether the cron command is in maintenance mode
+	// Maintenance is whether the cron task is in maintenance mode
 	Maintenance bool `json:"maintenance"`
 }
 
@@ -73,7 +73,7 @@ type FetchCronTasksInput struct {
 	WarnToFailure bool
 }
 
-// FetchCronTasks returns a list of cron commands for a given app
+// FetchCronTasks returns a list of cron tasks for a given app
 func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 	appName := input.AppName
 	commands := []TemplateCommand{}
@@ -95,10 +95,10 @@ func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 	for i, c := range input.AppJSON.Cron {
 		if c.Command == "" {
 			if input.WarnToFailure {
-				return commands, fmt.Errorf("Missing cron command for app %s (index %d)", appName, i)
+				return commands, fmt.Errorf("Missing cron task command for app %s (index %d)", appName, i)
 			}
 
-			common.LogWarn(fmt.Sprintf("Missing cron command for app %s (index %d)", appName, i))
+			common.LogWarn(fmt.Sprintf("Missing cron task command for app %s (index %d)", appName, i))
 			continue
 		}
 
@@ -129,7 +129,7 @@ func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 	return commands, nil
 }
 
-// FetchGlobalCronTasks returns a list of global cron commands
+// FetchGlobalCronTasks returns a list of global cron tasks
 // This function should only be used for the cron:list --global command
 // and not internally by the cron plugin
 func FetchGlobalCronTasks() ([]TemplateCommand, error) {
@@ -167,6 +167,6 @@ func FetchGlobalCronTasks() ([]TemplateCommand, error) {
 }
 
 // GenerateCommandID creates a unique ID for a given app/command/schedule combination
-func GenerateCommandID(appName string, c appjson.CronCommand) string {
+func GenerateCommandID(appName string, c appjson.CronTask) string {
 	return base36.EncodeToStringLc([]byte(appName + "===" + c.Command + "===" + c.Schedule))
 }
diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index 5b7057619..7bd416192 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -82,7 +82,7 @@ func CommandReport(appName string, format string, infoFlag string) error {
 	return ReportSingleApp(appName, format, infoFlag)
 }
 
-// CommandRun executes a cron command on the fly
+// CommandRun executes a cron task on the fly
 func CommandRun(appName string, cronID string, detached bool) error {
 	if err := common.VerifyAppName(appName); err != nil {
 		return err
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 5be47ea33..a46e477e8 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -630,7 +630,7 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 
 		words, err := shellquote.Split(cronTask.Command)
 		if err != nil {
-			return fmt.Errorf("Error parsing cron command: %w", err)
+			return fmt.Errorf("Error parsing cron task command: %w", err)
 		}
 
 		processResources, err := getProcessResources(appName, cronTask.ID)

From 791f53ab47bacc3526455bf80a2d87ccec5a78ef Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 7 Nov 2025 22:40:53 -0500
Subject: [PATCH 065/427] refactor: rename command to task in cron code

---
 plugins/cron/cron.go                        | 36 ++++++++++-----------
 plugins/cron/subcommands.go                 |  2 +-
 plugins/cron/templates/cron.tmpl            |  2 +-
 plugins/scheduler-docker-local/functions.go | 36 ++++++++++-----------
 plugins/scheduler-k3s/triggers.go           |  2 +-
 5 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index d1f19015e..172ffd95d 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -27,8 +27,8 @@ var (
 	}
 )
 
-// TemplateCommand is a struct that represents a cron task
-type TemplateCommand struct {
+// CronTask is a struct that represents a cron task
+type CronTask struct {
 	// ID is a unique identifier for the cron task
 	ID string `json:"id"`
 
@@ -55,7 +55,7 @@ type TemplateCommand struct {
 }
 
 // DokkuRunCommand returns the dokku run command to execute for a given cron task
-func (t TemplateCommand) DokkuRunCommand() string {
+func (t CronTask) DokkuRunCommand() string {
 	if t.AltCommand != "" {
 		if t.LogFile != "" {
 			return fmt.Sprintf("%s &>> %s", t.AltCommand, t.LogFile)
@@ -74,28 +74,28 @@ type FetchCronTasksInput struct {
 }
 
 // FetchCronTasks returns a list of cron tasks for a given app
-func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
+func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 	appName := input.AppName
-	commands := []TemplateCommand{}
+	tasks := []CronTask{}
 	isMaintenance := reportComputedMaintenance(appName) == "true"
 
 	if input.AppJSON == nil {
 		appJSON, err := appjson.GetAppJSON(appName)
 		if err != nil {
-			return commands, fmt.Errorf("Unable to fetch app.json for app %s: %s", appName, err.Error())
+			return tasks, fmt.Errorf("Unable to fetch app.json for app %s: %s", appName, err.Error())
 		}
 
 		input.AppJSON = &appJSON
 	}
 
 	if input.AppJSON.Cron == nil {
-		return commands, nil
+		return tasks, nil
 	}
 
 	for i, c := range input.AppJSON.Cron {
 		if c.Command == "" {
 			if input.WarnToFailure {
-				return commands, fmt.Errorf("Missing cron task command for app %s (index %d)", appName, i)
+				return tasks, fmt.Errorf("Missing cron task command for app %s (index %d)", appName, i)
 			}
 
 			common.LogWarn(fmt.Sprintf("Missing cron task command for app %s (index %d)", appName, i))
@@ -104,7 +104,7 @@ func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 
 		if c.Schedule == "" {
 			if input.WarnToFailure {
-				return commands, fmt.Errorf("Missing cron schedule for app %s (index %d)", appName, i)
+				return tasks, fmt.Errorf("Missing cron schedule for app %s (index %d)", appName, i)
 			}
 
 			common.LogWarn(fmt.Sprintf("Missing cron schedule for app %s (index %d)", appName, i))
@@ -114,10 +114,10 @@ func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 		parser := cronparser.NewParser(cronparser.Minute | cronparser.Hour | cronparser.Dom | cronparser.Month | cronparser.Dow | cronparser.Descriptor)
 		_, err := parser.Parse(c.Schedule)
 		if err != nil {
-			return commands, fmt.Errorf("Invalid cron schedule for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
+			return tasks, fmt.Errorf("Invalid cron schedule for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
 		}
 
-		commands = append(commands, TemplateCommand{
+		tasks = append(tasks, CronTask{
 			App:         appName,
 			Command:     c.Command,
 			Schedule:    c.Schedule,
@@ -126,14 +126,14 @@ func FetchCronTasks(input FetchCronTasksInput) ([]TemplateCommand, error) {
 		})
 	}
 
-	return commands, nil
+	return tasks, nil
 }
 
 // FetchGlobalCronTasks returns a list of global cron tasks
 // This function should only be used for the cron:list --global command
 // and not internally by the cron plugin
-func FetchGlobalCronTasks() ([]TemplateCommand, error) {
-	commands := []TemplateCommand{}
+func FetchGlobalCronTasks() ([]CronTask, error) {
+	tasks := []CronTask{}
 	response, _ := common.CallPlugnTrigger(common.PlugnTriggerInput{
 		Trigger: "cron-entries",
 		Args:    []string{"docker-local"},
@@ -150,7 +150,7 @@ func FetchGlobalCronTasks() ([]TemplateCommand, error) {
 		}
 
 		id := base36.EncodeToStringLc([]byte(strings.Join(parts, ";;;")))
-		command := TemplateCommand{
+		task := CronTask{
 			ID:          id,
 			Schedule:    parts[0],
 			Command:     parts[1],
@@ -159,11 +159,11 @@ func FetchGlobalCronTasks() ([]TemplateCommand, error) {
 			Global:      true,
 		}
 		if len(parts) == 3 {
-			command.LogFile = parts[2]
+			task.LogFile = parts[2]
 		}
-		commands = append(commands, command)
+		tasks = append(tasks, task)
 	}
-	return commands, nil
+	return tasks, nil
 }
 
 // GenerateCommandID creates a unique ID for a given app/command/schedule combination
diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index 7bd416192..1cc89342f 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -22,7 +22,7 @@ func CommandList(appName string, format string) error {
 		return fmt.Errorf("Invalid format specified, supported formats: json, stdout")
 	}
 
-	var tasks []TemplateCommand
+	var tasks []CronTask
 	if appName == "--global" {
 		var err error
 		tasks, err = FetchGlobalCronTasks()
diff --git a/plugins/cron/templates/cron.tmpl b/plugins/cron/templates/cron.tmpl
index 3f186e97b..75577e6ee 100644
--- a/plugins/cron/templates/cron.tmpl
+++ b/plugins/cron/templates/cron.tmpl
@@ -7,6 +7,6 @@ MAILTO={{ .Mailto }}
 PATH=/usr/local/bin:/usr/bin:/bin
 SHELL=/bin/bash
 
-{{ range $task := .Commands -}}
+{{ range $task := .Tasks -}}
 {{ $task.Schedule }} {{ $task.DokkuRunCommand }}
 {{ end -}}
diff --git a/plugins/scheduler-docker-local/functions.go b/plugins/scheduler-docker-local/functions.go
index 316192d31..977a8904c 100644
--- a/plugins/scheduler-docker-local/functions.go
+++ b/plugins/scheduler-docker-local/functions.go
@@ -38,23 +38,23 @@ func deleteCrontab() error {
 	return nil
 }
 
-func generateCronTasks() ([]cron.TemplateCommand, error) {
+func generateCronTasks() ([]cron.CronTask, error) {
 	apps, _ := common.UnfilteredDokkuApps()
 
 	g := new(errgroup.Group)
-	results := make(chan []cron.TemplateCommand, len(apps)+1)
+	results := make(chan []cron.CronTask, len(apps)+1)
 	for _, appName := range apps {
 		appName := appName
 		g.Go(func() error {
 			scheduler := common.GetAppScheduler(appName)
 			if scheduler != "docker-local" {
-				results <- []cron.TemplateCommand{}
+				results <- []cron.CronTask{}
 				return nil
 			}
 
 			c, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
 			if err != nil {
-				results <- []cron.TemplateCommand{}
+				results <- []cron.CronTask{}
 				common.LogWarn(err.Error())
 				return nil
 			}
@@ -65,55 +65,55 @@ func generateCronTasks() ([]cron.TemplateCommand, error) {
 	}
 
 	g.Go(func() error {
-		commands := []cron.TemplateCommand{}
+		tasks := []cron.CronTask{}
 		response, _ := common.CallPlugnTrigger(common.PlugnTriggerInput{
 			Trigger: "cron-entries",
 			Args:    []string{"docker-local"},
 		})
 		for _, line := range strings.Split(response.StdoutContents(), "\n") {
 			if strings.TrimSpace(line) == "" {
-				results <- []cron.TemplateCommand{}
+				results <- []cron.CronTask{}
 				return nil
 			}
 
 			parts := strings.Split(line, ";")
 			if len(parts) != 2 && len(parts) != 3 {
-				results <- []cron.TemplateCommand{}
+				results <- []cron.CronTask{}
 				return fmt.Errorf("Invalid injected cron task: %v", line)
 			}
 
 			id := base36.EncodeToStringLc([]byte(strings.Join(parts, ";;;")))
-			command := cron.TemplateCommand{
+			task := cron.CronTask{
 				ID:          id,
 				Schedule:    parts[0],
 				AltCommand:  parts[1],
 				Maintenance: false,
 			}
 			if len(parts) == 3 {
-				command.LogFile = parts[2]
+				task.LogFile = parts[2]
 			}
-			commands = append(commands, command)
+			tasks = append(tasks, task)
 		}
-		results <- commands
+		results <- tasks
 		return nil
 	})
 
 	err := g.Wait()
 	close(results)
 
-	commands := []cron.TemplateCommand{}
+	tasks := []cron.CronTask{}
 	if err != nil {
-		return commands, err
+		return tasks, err
 	}
 
 	for result := range results {
 		c := result
 		if len(c) > 0 && !c[0].Maintenance {
-			commands = append(commands, c...)
+			tasks = append(tasks, c...)
 		}
 	}
 
-	return commands, nil
+	return tasks, nil
 }
 
 func writeCronTasks(scheduler string) error {
@@ -122,12 +122,12 @@ func writeCronTasks(scheduler string) error {
 		return nil
 	}
 
-	commands, err := generateCronTasks()
+	tasks, err := generateCronTasks()
 	if err != nil {
 		return err
 	}
 
-	if len(commands) == 0 {
+	if len(tasks) == 0 {
 		return deleteCrontab()
 	}
 
@@ -144,7 +144,7 @@ func writeCronTasks(scheduler string) error {
 	mailto := mailtoResults.StdoutContents()
 
 	data := map[string]interface{}{
-		"Commands": commands,
+		"Tasks":    tasks,
 		"Mailfrom": mailfrom,
 		"Mailto":   mailto,
 	}
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index a46e477e8..def82453f 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -317,7 +317,7 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 		return fmt.Errorf("Error fetching cron tasks: %w", err)
 	}
 	// remove maintenance cron tasks
-	cronTasks := []cron.TemplateCommand{}
+	cronTasks := []cron.CronTask{}
 	for _, cronTask := range allCronTasks {
 		if !cronTask.Maintenance {
 			cronTasks = append(cronTasks, cronTask)

From 593a4c81703b235876fc4d3d0ce379a15d3ba744 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 8 Nov 2025 00:09:07 -0500
Subject: [PATCH 066/427] fix: use correct variable for tasks

---
 plugins/cron/cron.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index f23678051..9fb96860c 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -80,7 +80,7 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 	isMaintenance := reportComputedMaintenance(appName) == "true"
 
 	if input.AppJSON == nil && input.AppName == "" {
-		return commands, fmt.Errorf("Missing app name or app.json")
+		return tasks, fmt.Errorf("Missing app name or app.json")
 	}
 
 	if input.AppJSON == nil {

From b4dd50731a204acfde31a409f69955c5c4264c63 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 8 Nov 2025 00:16:01 -0500
Subject: [PATCH 067/427] fix: use the correct case for AS in Dockerfile

---
 contrib/build-dokku.Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/contrib/build-dokku.Dockerfile b/contrib/build-dokku.Dockerfile
index 04342fc45..9593c2796 100644
--- a/contrib/build-dokku.Dockerfile
+++ b/contrib/build-dokku.Dockerfile
@@ -23,7 +23,7 @@ COPY . ${WORKDIR}
 ENV GOPATH=/go
 ENV GOROOT=/usr/local/go
 
-FROM builder as amd64
+FROM builder AS amd64
 
 ARG PLUGIN_MAKE_TARGET
 ARG DOKKU_VERSION=master
@@ -38,7 +38,7 @@ RUN PLUGIN_MAKE_TARGET=${PLUGIN_MAKE_TARGET} \
   make version copyfiles \
   && make deb-dokku
 
-FROM builder as arm64
+FROM builder AS arm64
 
 COPY --from=amd64 /tmp /tmp
 COPY --from=amd64 /usr/local/share/man/man1/dokku.1 /usr/local/share/man/man1/dokku.1-generated

From e134c314ea7f8322a5ffebc25201e6a8e2c7f1ab Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 8 Nov 2025 01:02:19 -0500
Subject: [PATCH 068/427] feat: implement config:import command

Closes #6846
---
 plugins/config/Makefile                       |   2 +-
 plugins/config/config.go                      |  10 +-
 plugins/config/config_test.go                 |  83 +++++-
 plugins/config/environment.go                 |  39 +++
 plugins/config/functions.go                   |  40 ++-
 plugins/config/src/commands/commands.go       |   1 +
 plugins/config/src/subcommands/subcommands.go |  16 +
 plugins/config/subcommands.go                 |  10 +
 plugins/ports/functions.go                    |   4 +-
 plugins/proxy/proxy.go                        |   2 +-
 plugins/proxy/subcommands.go                  |   2 +-
 plugins/ps/triggers.go                        |   4 +-
 tests/unit/config.bats                        | 276 ++++++++++++++++++
 13 files changed, 477 insertions(+), 12 deletions(-)

diff --git a/plugins/config/Makefile b/plugins/config/Makefile
index 0cf396bd8..1f1be8b3c 100644
--- a/plugins/config/Makefile
+++ b/plugins/config/Makefile
@@ -1,5 +1,5 @@
 GOARCH ?= amd64
-SUBCOMMANDS = subcommands/bundle subcommands/clear subcommands/export subcommands/get subcommands/keys subcommands/show subcommands/set subcommands/unset
+SUBCOMMANDS = subcommands/bundle subcommands/clear subcommands/export subcommands/get subcommands/import subcommands/keys subcommands/show subcommands/set subcommands/unset
 TRIGGERS = triggers/config-export triggers/config-get triggers/config-get-global triggers/config-unset triggers/post-app-clone-setup triggers/post-app-rename-setup
 BUILD = commands config_sub subcommands triggers
 PLUGIN_NAME = config
diff --git a/plugins/config/config.go b/plugins/config/config.go
index 90f04039d..18d4d9403 100644
--- a/plugins/config/config.go
+++ b/plugins/config/config.go
@@ -30,7 +30,7 @@ func GetWithDefault(appName string, key string, defaultValue string) (value stri
 }
 
 // SetMany variables in the environment. If appName is empty the global config is used. If restart is true the app is restarted.
-func SetMany(appName string, entries map[string]string, restart bool) (err error) {
+func SetMany(appName string, entries map[string]string, replace bool, restart bool) (err error) {
 	global := appName == "" || appName == "--global"
 	env, err := loadAppOrGlobalEnv(appName)
 	if err != nil {
@@ -42,6 +42,10 @@ func SetMany(appName string, entries map[string]string, restart bool) (err error
 			return
 		}
 	}
+
+	if replace {
+		env.Clear()
+	}
 	for k, v := range entries {
 		env.Set(k, v)
 		keys = append(keys, k)
@@ -128,6 +132,10 @@ func UnsetAll(appName string, restart bool) (err error) {
 }
 
 func triggerRestart(appName string) {
+	if !common.IsDeployed(appName) {
+		return
+	}
+
 	common.LogInfo1(fmt.Sprintf("Restarting app %s", appName))
 	_, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
 		Trigger:     "release-and-deploy",
diff --git a/plugins/config/config_test.go b/plugins/config/config_test.go
index e6b9abfce..5c43edbb9 100644
--- a/plugins/config/config_test.go
+++ b/plugins/config/config_test.go
@@ -128,6 +128,82 @@ func TestConfigUnsetMany(t *testing.T) {
 	Expect(CommandUnset(testAppName+"does-not-exist", keys, false, true)).ToNot(Succeed())
 }
 
+func TestConfigImport(t *testing.T) {
+	RegisterTestingT(t)
+	Expect(setupTests()).To(Succeed())
+	Expect(setupTestApp()).To(Succeed())
+	defer teardownTestApp()
+
+	tempFile, err := os.CreateTemp("", "test-config-import-*.env")
+	Expect(err).To(Succeed())
+	defer os.Remove(tempFile.Name())
+	content := `
+testKey=TESTING
+testKey2=TESTING-'\n'-updated
+`
+	_, err = tempFile.WriteString(content)
+	Expect(err).To(Succeed())
+	tempFile.Close()
+
+	Expect(CommandImport(testAppName, false, false, true, "envfile", tempFile.Name())).To(Succeed())
+	expectValue(testAppName, "testKey", "TESTING")
+	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+
+	env, err := LoadAppEnv(testAppName)
+	Expect(err).To(Succeed())
+	env.Set("testKey", "TESTING-updated2")
+	env.Set("testKey2", "TESTING-'\n'-updated2")
+	env.Set("testKey3", "TESTING-'\n'-updated3")
+	env.Write()
+
+	Expect(CommandImport(testAppName, false, false, true, "envfile", tempFile.Name())).To(Succeed())
+	expectValue(testAppName, "testKey", "TESTING-updated2")
+	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated2")
+	expectValue(testAppName, "testKey3", "TESTING-'\n'-updated3")
+
+	Expect(CommandImport(testAppName, false, true, true, "envfile", tempFile.Name())).To(Succeed())
+	expectValue(testAppName, "testKey", "TESTING-updated")
+	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+	expectNoValue(testAppName, "testKey3")
+}
+
+func TestConfigImportJSON(t *testing.T) {
+	RegisterTestingT(t)
+	Expect(setupTests()).To(Succeed())
+	Expect(setupTestApp()).To(Succeed())
+	defer teardownTestApp()
+
+	tempFile, err := os.CreateTemp("", "test-config-import-*.json")
+	Expect(err).To(Succeed())
+	defer os.Remove(tempFile.Name())
+
+	content := `{"testKey": "TESTING", "testKey2": "TESTING-'\n'-updated"}`
+	_, err = tempFile.WriteString(content)
+	Expect(err).To(Succeed())
+	tempFile.Close()
+
+	Expect(CommandImport(testAppName, false, false, true, "json", tempFile.Name())).To(Succeed())
+	expectValue(testAppName, "testKey", "TESTING")
+	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+
+	env, err := LoadAppEnv(testAppName)
+	Expect(err).To(Succeed())
+	env.Set("testKey", "TESTING-updated2")
+	env.Set("testKey2", "TESTING-'\n'-updated2")
+	env.Set("testKey3", "TESTING-'\n'-updated3")
+	env.Write()
+
+	Expect(CommandImport(testAppName, false, false, true, "json", tempFile.Name())).To(Succeed())
+	expectValue(testAppName, "testKey", "TESTING-updated2")
+	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated2")
+	expectValue(testAppName, "testKey3", "TESTING-'\n'-updated3")
+
+	Expect(CommandImport(testAppName, false, true, true, "json", tempFile.Name())).To(Succeed())
+	expectValue(testAppName, "testKey", "TESTING-updated")
+	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+	expectNoValue(testAppName, "testKey3")
+}
+
 func TestEnvironmentLoading(t *testing.T) {
 	RegisterTestingT(t)
 	Expect(setupTests()).To(Succeed())
@@ -161,12 +237,13 @@ func TestInvalidKeys(t *testing.T) {
 
 	invalidKeys := []string{"0invalidKey", "invalid:key", "invalid=Key", "!invalidKey"}
 	for _, key := range invalidKeys {
-		Expect(SetMany(testAppName, map[string]string{key: "value"}, false)).NotTo(Succeed())
+		Expect(SetMany(testAppName, map[string]string{key: "value"}, false, false)).NotTo(Succeed())
 		Expect(UnsetMany(testAppName, []string{key}, false)).NotTo(Succeed())
 		value, ok := Get(testAppName, key)
 		Expect(ok).To(Equal(false))
-		value = GetWithDefault(testAppName, key, "default")
-		Expect(value).To(Equal("default"))
+		Expect(value).To(Equal(""))
+		value2 := GetWithDefault(testAppName, key, "default")
+		Expect(value2).To(Equal("default"))
 	}
 }
 
diff --git a/plugins/config/environment.go b/plugins/config/environment.go
index 877939e5f..6e341dd62 100644
--- a/plugins/config/environment.go
+++ b/plugins/config/environment.go
@@ -88,6 +88,11 @@ func LoadGlobalEnv() (*Env, error) {
 	return loadFromFile("<global>", getGlobalFile())
 }
 
+// Clear clears the environment
+func (e *Env) Clear() {
+	e.env = make(map[string]string)
+}
+
 // Filename returns the full path on disk to the file holding the env vars
 func (e *Env) Filename() string {
 	return e.filename
@@ -326,8 +331,17 @@ func prettyPrintEnvEntries(prefix string, entries map[string]string) string {
 
 func loadFromFile(name string, filename string) (env *Env, err error) {
 	envMap := make(map[string]string)
+	if filename == "-" {
+		envMap, err = godotenv.Parse(os.Stdin)
+		if err != nil {
+			return nil, err
+		}
+	}
 	if _, err := os.Stat(filename); err == nil {
 		envMap, err = godotenv.Read(filename)
+		if err != nil {
+			return nil, err
+		}
 	}
 
 	dirty := false
@@ -352,6 +366,31 @@ func loadFromFile(name string, filename string) (env *Env, err error) {
 	return
 }
 
+func loadFromFileJSON(name string, filename string) (env *Env, err error) {
+	envMap := make(map[string]string)
+	if filename == "-" {
+		err = json.NewDecoder(os.Stdin).Decode(&envMap)
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		file, err := os.Open(filename)
+		if err != nil {
+			return nil, err
+		}
+		defer file.Close()
+		err = json.NewDecoder(file).Decode(&envMap)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	return &Env{
+		name:     name,
+		filename: "",
+		env:      envMap,
+	}, nil
+}
 func getAppFile(appName string) (string, error) {
 	return filepath.Join(common.MustGetEnv("DOKKU_ROOT"), appName, "ENV"), nil
 }
diff --git a/plugins/config/functions.go b/plugins/config/functions.go
index 28997d25a..69932ec7c 100644
--- a/plugins/config/functions.go
+++ b/plugins/config/functions.go
@@ -82,6 +82,44 @@ func SubGet(appName string, keys []string, quoted bool) error {
 	return nil
 }
 
+// SubImport imports environment variables from a file
+func SubImport(appName string, replace bool, noRestart bool, format string, filename string) error {
+	if filename == "-" {
+		common.LogInfo1Quiet("Reading config vars from stdin")
+	}
+
+	if format == "" {
+		format = "envfile"
+	}
+
+	var env *Env
+	var err error
+	switch format {
+	case "envfile":
+		env, err = loadFromFile(appName, filename)
+		if err != nil {
+			return err
+		}
+	case "json":
+		env, err = loadFromFileJSON(appName, filename)
+		if err != nil {
+			return err
+		}
+	default:
+		return fmt.Errorf("Unknown format: %s", format)
+	}
+
+	if len(env.Map()) == 0 {
+		return errors.New("No config vars to set")
+	}
+
+	for k, v := range env.Map() {
+		common.LogInfo1Quiet(fmt.Sprintf("Setting config var %s=%s", k, v))
+	}
+
+	return SetMany(appName, env.Map(), replace, !noRestart)
+}
+
 // SubKeys implements the logic for config:keys without app name validation
 func SubKeys(appName string, merged bool) error {
 	env := getEnvironment(appName, merged)
@@ -115,7 +153,7 @@ func SubSet(appName string, pairs []string, noRestart bool, encoded bool) error
 		updated[key] = value
 	}
 
-	return SetMany(appName, updated, !noRestart)
+	return SetMany(appName, updated, false, !noRestart)
 }
 
 // SubShow implements the logic for config:show without app name validation
diff --git a/plugins/config/src/commands/commands.go b/plugins/config/src/commands/commands.go
index 78d180de1..ea894fba0 100644
--- a/plugins/config/src/commands/commands.go
+++ b/plugins/config/src/commands/commands.go
@@ -24,6 +24,7 @@ Additional commands:`
     config:clear [--no-restart] (<app>|--global), Clears environment variables
     config:export [--format=FORMAT] [--merged] (<app>|--global), Export a global or app environment
     config:get [--quoted] (<app>|--global) KEY, Display a global or app-specific config value
+	config:import [--no-restart] [--replace] (<app>|--global) [FILE|-], Import environment from file
     config:keys [--merged] (<app>|--global), Show keys set in environment
     config:show [--merged] (<app>|--global), Show keys set in environment
     config:set [--encoded] [--no-restart] (<app>|--global) KEY1=VALUE1 [KEY2=VALUE2 ...], Set one or more config vars
diff --git a/plugins/config/src/subcommands/subcommands.go b/plugins/config/src/subcommands/subcommands.go
index 5fe5bc834..2590c98ed 100644
--- a/plugins/config/src/subcommands/subcommands.go
+++ b/plugins/config/src/subcommands/subcommands.go
@@ -65,6 +65,22 @@ func main() {
 		}
 		keys := getKeys(args.Args(), *global)
 		err = config.CommandGet(appName, keys, *global, *quoted)
+	case "import":
+		args := flag.NewFlagSet("config:import", flag.ExitOnError)
+		global := args.Bool("global", false, "--global: use the global environment")
+		noRestart := args.Bool("no-restart", false, "--no-restart: no restart")
+		replace := args.Bool("replace", false, "--replace: replace existing config vars")
+		format := args.String("format", "envfile", "--format: [ envfile | json ] which format to export as)")
+
+		args.Parse(os.Args[2:])
+		var filename string
+		if !*global {
+			appName = args.Arg(0)
+			filename = args.Arg(1)
+		} else {
+			filename = args.Arg(0)
+		}
+		err = config.CommandImport(appName, *global, *replace, *noRestart, *format, filename)
 	case "keys":
 		args := flag.NewFlagSet("config:keys", flag.ExitOnError)
 		global := args.Bool("global", false, "--global: use the global environment")
diff --git a/plugins/config/subcommands.go b/plugins/config/subcommands.go
index fe7e252d6..9b6a45be3 100644
--- a/plugins/config/subcommands.go
+++ b/plugins/config/subcommands.go
@@ -42,6 +42,16 @@ func CommandGet(appName string, keys []string, global bool, quoted bool) error {
 	return SubGet(appName, keys, quoted)
 }
 
+// CommandImport imports environment variables from a file
+func CommandImport(appName string, global bool, replace bool, noRestart bool, format string, filename string) error {
+	appName, err := getAppNameOrGlobal(appName, global)
+	if err != nil {
+		return err
+	}
+
+	return SubImport(appName, replace, noRestart, format, filename)
+}
+
 // CommandKeys shows the keys set for the specified environment
 func CommandKeys(appName string, global bool, merged bool) error {
 	appName, err := getAppNameOrGlobal(appName, global)
diff --git a/plugins/ports/functions.go b/plugins/ports/functions.go
index 29ca80b0d..76aeaed3d 100644
--- a/plugins/ports/functions.go
+++ b/plugins/ports/functions.go
@@ -449,7 +449,7 @@ func setProxyPort(appName string, port int) error {
 		entries := map[string]string{
 			"DOKKU_PROXY_PORT": fmt.Sprint(port),
 		}
-		return config.SetMany(appName, entries, false)
+		return config.SetMany(appName, entries, false, false)
 	}, map[string]string{"DOKKU_QUIET_OUTPUT": "1"})
 }
 
@@ -459,7 +459,7 @@ func setProxySSLPort(appName string, port int) error {
 		entries := map[string]string{
 			"DOKKU_PROXY_SSL_PORT": fmt.Sprint(port),
 		}
-		return config.SetMany(appName, entries, false)
+		return config.SetMany(appName, entries, false, false)
 	}, map[string]string{"DOKKU_QUIET_OUTPUT": "1"})
 }
 
diff --git a/plugins/proxy/proxy.go b/plugins/proxy/proxy.go
index 57a7bfba6..b674f72b0 100644
--- a/plugins/proxy/proxy.go
+++ b/plugins/proxy/proxy.go
@@ -41,7 +41,7 @@ func Disable(appName string) error {
 		"DOKKU_DISABLE_PROXY": "1",
 	}
 
-	if err := config.SetMany(appName, entries, false); err != nil {
+	if err := config.SetMany(appName, entries, false, false); err != nil {
 		return err
 	}
 
diff --git a/plugins/proxy/subcommands.go b/plugins/proxy/subcommands.go
index 96a90535b..ccf7fa9f5 100644
--- a/plugins/proxy/subcommands.go
+++ b/plugins/proxy/subcommands.go
@@ -106,5 +106,5 @@ func CommandSet(appName string, proxyType string) error {
 	entries := map[string]string{
 		key: proxyType,
 	}
-	return config.SetMany(appName, entries, false)
+	return config.SetMany(appName, entries, false, false)
 }
diff --git a/plugins/ps/triggers.go b/plugins/ps/triggers.go
index 0e355933c..aa2282460 100644
--- a/plugins/ps/triggers.go
+++ b/plugins/ps/triggers.go
@@ -42,7 +42,7 @@ func TriggerCorePostDeploy(appName string) error {
 	}
 
 	return common.SuppressOutput(func() error {
-		return config.SetMany(appName, entries, false)
+		return config.SetMany(appName, entries, false, false)
 	})
 }
 
@@ -245,7 +245,7 @@ func TriggerPostStop(appName string) error {
 	}
 
 	return common.SuppressOutput(func() error {
-		return config.SetMany(appName, entries, false)
+		return config.SetMany(appName, entries, false, false)
 	})
 }
 
diff --git a/tests/unit/config.bats b/tests/unit/config.bats
index d8d8d1808..e66d3e92a 100644
--- a/tests/unit/config.bats
+++ b/tests/unit/config.bats
@@ -77,6 +77,282 @@ teardown() {
   assert_output_not_exists
 }
 
+@test "(config) config:import stdin" {
+  run /bin/bash -c "dokku config:set $TEST_APP first_key=first_value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo 'second_key=second_value' | dokku config:import $TEST_APP -"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "first_value"
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "second_value"
+
+  run /bin/bash -c "echo 'test_var=TESTING2' | dokku config:import $TEST_APP -"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "first_value"
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "second_value"
+  run /bin/bash -c "dokku config:get $TEST_APP test_var"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "TESTING2"
+
+  run /bin/bash -c "echo 'test_var=TESTING3' | dokku config:import --replace $TEST_APP -"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  run /bin/bash -c "dokku config:get $TEST_APP test_var"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "TESTING3"
+}
+
+@test "(config) config:import file" {
+  local TMP_FILE=$(mktemp "/tmp/config-import.XXXXX")
+  trap 'popd &>/dev/null || true; rm -rf "$TMP"' INT TERM
+
+  run /bin/bash -c "dokku config:set $TEST_APP first_key=first_value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo 'second_key=second_value' > $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:import $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+
+  run /bin/bash -c "chown dokku:dokku $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:import $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "first_value"
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "second_value"
+  run /bin/bash -c "rm -f $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo 'test_var=TESTING2' > $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "chown dokku:dokku $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:import $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "first_value"
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "second_value"
+  run /bin/bash -c "dokku config:get $TEST_APP test_var"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "TESTING2"
+  run /bin/bash -c "rm -f $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo 'test_var=TESTING3' > $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "chown dokku:dokku $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:import --replace $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  run /bin/bash -c "dokku config:get $TEST_APP test_var"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "TESTING3"
+  run /bin/bash -c "rm -f $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+}
+
+
+@test "(config) config:import file json" {
+  local TMP_FILE=$(mktemp "/tmp/config-import.XXXXX")
+  trap 'popd &>/dev/null || true; rm -rf "$TMP"' INT TERM
+
+  run /bin/bash -c "dokku config:set $TEST_APP first_key=first_value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo '{\"second_key\": \"second_value\"}' > $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:import --format json $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+
+  run /bin/bash -c "chown dokku:dokku $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:import --format json $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "first_value"
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "second_value"
+  run /bin/bash -c "rm -f $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo '{\"test_var\": \"TESTING2\"}' > $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "chown dokku:dokku $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:import --format json $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "first_value"
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "second_value"
+  run /bin/bash -c "dokku config:get $TEST_APP test_var"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "TESTING2"
+  run /bin/bash -c "rm -f $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "echo '{\"test_var\": \"TESTING3\"}' > $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "chown dokku:dokku $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku config:import --replace --format json $TEST_APP $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  run /bin/bash -c "dokku config:get $TEST_APP first_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  run /bin/bash -c "dokku config:get $TEST_APP second_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  run /bin/bash -c "dokku config:get $TEST_APP test_var"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "TESTING3"
+  run /bin/bash -c "rm -f $TMP_FILE"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+}
+
 @test "(config) config:set/get" {
   run ssh "dokku@$DOKKU_DOMAIN" config:set $TEST_APP test_var1=true test_var2=\"hello world\" test_var3='double\"quotes'
   echo "output: $output"

From 770d150c7c526b24aadc23b4a07fae9e07281ac8 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 8 Nov 2025 01:17:50 -0500
Subject: [PATCH 069/427] fix: correct lint issue

---
 tests/unit/config.bats | 1 -
 1 file changed, 1 deletion(-)

diff --git a/tests/unit/config.bats b/tests/unit/config.bats
index e66d3e92a..1825feb12 100644
--- a/tests/unit/config.bats
+++ b/tests/unit/config.bats
@@ -245,7 +245,6 @@ teardown() {
   assert_success
 }
 
-
 @test "(config) config:import file json" {
   local TMP_FILE=$(mktemp "/tmp/config-import.XXXXX")
   trap 'popd &>/dev/null || true; rm -rf "$TMP"' INT TERM

From 97f2dc81c715e03be0b8f3aa3d612204e568f379 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 8 Nov 2025 01:22:31 -0500
Subject: [PATCH 070/427] fix: simplify tests

---
 plugins/config/config_test.go | 46 +++++++++++++++++------------------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/plugins/config/config_test.go b/plugins/config/config_test.go
index 5c43edbb9..9eb0d0358 100644
--- a/plugins/config/config_test.go
+++ b/plugins/config/config_test.go
@@ -138,32 +138,32 @@ func TestConfigImport(t *testing.T) {
 	Expect(err).To(Succeed())
 	defer os.Remove(tempFile.Name())
 	content := `
-testKey=TESTING
-testKey2=TESTING-'\n'-updated
+testKey=TESTING-updated1
+testKey2=TESTING-updated2
 `
 	_, err = tempFile.WriteString(content)
 	Expect(err).To(Succeed())
 	tempFile.Close()
 
 	Expect(CommandImport(testAppName, false, false, true, "envfile", tempFile.Name())).To(Succeed())
-	expectValue(testAppName, "testKey", "TESTING")
-	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+	expectValue(testAppName, "testKey", "TESTING-updated1")
+	expectValue(testAppName, "testKey2", "TESTING-updated2")
 
 	env, err := LoadAppEnv(testAppName)
 	Expect(err).To(Succeed())
-	env.Set("testKey", "TESTING-updated2")
-	env.Set("testKey2", "TESTING-'\n'-updated2")
-	env.Set("testKey3", "TESTING-'\n'-updated3")
+	env.Set("testKey", "TESTING-original1")
+	env.Set("testKey2", "TESTING-original2")
+	env.Set("testKey3", "TESTING-original3")
 	env.Write()
 
 	Expect(CommandImport(testAppName, false, false, true, "envfile", tempFile.Name())).To(Succeed())
-	expectValue(testAppName, "testKey", "TESTING-updated2")
-	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated2")
-	expectValue(testAppName, "testKey3", "TESTING-'\n'-updated3")
+	expectValue(testAppName, "testKey", "TESTING-updated1")
+	expectValue(testAppName, "testKey2", "TESTING-updated2")
+	expectValue(testAppName, "testKey3", "TESTING-original3")
 
 	Expect(CommandImport(testAppName, false, true, true, "envfile", tempFile.Name())).To(Succeed())
-	expectValue(testAppName, "testKey", "TESTING-updated")
-	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+	expectValue(testAppName, "testKey", "TESTING-updated1")
+	expectValue(testAppName, "testKey2", "TESTING-updated2")
 	expectNoValue(testAppName, "testKey3")
 }
 
@@ -177,30 +177,30 @@ func TestConfigImportJSON(t *testing.T) {
 	Expect(err).To(Succeed())
 	defer os.Remove(tempFile.Name())
 
-	content := `{"testKey": "TESTING", "testKey2": "TESTING-'\n'-updated"}`
+	content := `{"testKey": "TESTING-updated1", "testKey2": "TESTING-updated2"}`
 	_, err = tempFile.WriteString(content)
 	Expect(err).To(Succeed())
 	tempFile.Close()
 
 	Expect(CommandImport(testAppName, false, false, true, "json", tempFile.Name())).To(Succeed())
-	expectValue(testAppName, "testKey", "TESTING")
-	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+	expectValue(testAppName, "testKey", "TESTING-updated1")
+	expectValue(testAppName, "testKey2", "TESTING-updated2")
 
 	env, err := LoadAppEnv(testAppName)
 	Expect(err).To(Succeed())
-	env.Set("testKey", "TESTING-updated2")
-	env.Set("testKey2", "TESTING-'\n'-updated2")
-	env.Set("testKey3", "TESTING-'\n'-updated3")
+	env.Set("testKey", "TESTING-original1")
+	env.Set("testKey2", "TESTING-original2")
+	env.Set("testKey3", "TESTING-original3")
 	env.Write()
 
 	Expect(CommandImport(testAppName, false, false, true, "json", tempFile.Name())).To(Succeed())
-	expectValue(testAppName, "testKey", "TESTING-updated2")
-	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated2")
-	expectValue(testAppName, "testKey3", "TESTING-'\n'-updated3")
+	expectValue(testAppName, "testKey", "TESTING-updated1")
+	expectValue(testAppName, "testKey2", "TESTING-updated2")
+	expectValue(testAppName, "testKey3", "TESTING-original3")
 
 	Expect(CommandImport(testAppName, false, true, true, "json", tempFile.Name())).To(Succeed())
-	expectValue(testAppName, "testKey", "TESTING-updated")
-	expectValue(testAppName, "testKey2", "TESTING-'\n'-updated")
+	expectValue(testAppName, "testKey", "TESTING-updated1")
+	expectValue(testAppName, "testKey2", "TESTING-updated2")
 	expectNoValue(testAppName, "testKey3")
 }
 

From 8d4fc1f8831f0a8133f68362d59bf921d07f7b4d Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Sat, 8 Nov 2025 06:24:58 +0000
Subject: [PATCH 071/427] Release 0.36.11

# History

## 0.36.11

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.36.11/bootstrap.sh
sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh
```

### Bug Fixes

- #8084: @josegonzalez Use the correct case for AS in Dockerfile
- #8083: @josegonzalez Use correct variable for tasks
- #8081: @josegonzalez Error out if the appname or app.json is missing when retrieving cron entries

### Refactors

- #8082: @josegonzalez Standardize naming in cron code

### Dependencies

- #8073: @dependabot[bot] chore(deps): bump timberio/vector from 0.50.0-debian to 0.51.0-debian in /plugins/logs
- #8080: @dependabot[bot] chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 in /plugins/scheduler-k3s
- #8079: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/zombies-dockerfile-tini
- #8075: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/go-fail-postdeploy
- #8078: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/go-fail-predeploy
- #8077: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/zombies-dockerfile-no-tini
- #8076: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/gogrpc
- #8072: @dependabot[bot] chore(deps): update markdown requirement from <3.10,>=3.2.1 to >=3.2.1,<3.11 in /docs/_build
- #8074: @dependabot[bot] chore(deps): bump django from 5.2.7 to 5.2.8 in /tests/apps/dockerfile-release
- #8071: @dependabot[bot] chore(deps): bump mkdocs-material from 9.6.22 to 9.6.23 in /docs/_build
- #8068: @dependabot[bot] chore(deps): bump traefik from 3.5.3 to 3.5.4 in /plugins/traefik-vhosts
- #8069: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.18.0 to 2.18.1 in /plugins/scheduler-k3s
- #8066: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.29 to 2.11.30 in /plugins/scheduler-k3s
---
 HISTORY.md                                 | 35 +++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 56 files changed, 167 insertions(+), 132 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index 5d1472e3c..c400b2aa1 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,40 @@
 # History
 
+## 0.36.11
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.36.11/bootstrap.sh
+sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8084: @josegonzalez Use the correct case for AS in Dockerfile
+- #8083: @josegonzalez Use correct variable for tasks
+- #8081: @josegonzalez Error out if the appname or app.json is missing when retrieving cron entries
+
+### Refactors
+
+- #8082: @josegonzalez Standardize naming in cron code
+
+### Dependencies
+
+- #8073: @dependabot[bot] chore(deps): bump timberio/vector from 0.50.0-debian to 0.51.0-debian in /plugins/logs
+- #8080: @dependabot[bot] chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 in /plugins/scheduler-k3s
+- #8079: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/zombies-dockerfile-tini
+- #8075: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/go-fail-postdeploy
+- #8078: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/go-fail-predeploy
+- #8077: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/zombies-dockerfile-no-tini
+- #8076: @dependabot[bot] chore(deps): bump golang from 1.25.3 to 1.25.4 in /tests/apps/gogrpc
+- #8072: @dependabot[bot] chore(deps): update markdown requirement from <3.10,>=3.2.1 to >=3.2.1,<3.11 in /docs/_build
+- #8074: @dependabot[bot] chore(deps): bump django from 5.2.7 to 5.2.8 in /tests/apps/dockerfile-release
+- #8071: @dependabot[bot] chore(deps): bump mkdocs-material from 9.6.22 to 9.6.23 in /docs/_build
+- #8068: @dependabot[bot] chore(deps): bump traefik from 3.5.3 to 3.5.4 in /plugins/traefik-vhosts
+- #8069: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.18.0 to 2.18.1 in /plugins/scheduler-k3s
+- #8066: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.29 to 2.11.30 in /plugins/scheduler-k3s
+
 ## 0.36.10
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 52d35a32b..b00dd56d9 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.36.10/bootstrap.sh
-sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.36.11/bootstrap.sh
+sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index 5ca00817b..c6679c1fd 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.36.10
+Version: 0.36.11
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 2ffc2bea6..475a561a0 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.36.10 enabled    dokku core standard plugin
-  20_events            0.36.10 enabled    dokku core events logging plugin
-  app-json             0.36.10 enabled    dokku core app-json plugin
-  apps                 0.36.10 enabled    dokku core apps plugin
-  build-env            0.36.10 enabled    dokku core build-env plugin
-  buildpacks           0.36.10 enabled    dokku core buildpacks plugin
-  certs                0.36.10 enabled    dokku core certificate management plugin
-  checks               0.36.10 enabled    dokku core checks plugin
-  common               0.36.10 enabled    dokku core common plugin
-  config               0.36.10 enabled    dokku core config plugin
-  docker-options       0.36.10 enabled    dokku core docker-options plugin
-  domains              0.36.10 enabled    dokku core domains plugin
-  enter                0.36.10 enabled    dokku core enter plugin
-  git                  0.36.10 enabled    dokku core git plugin
-  logs                 0.36.10 enabled    dokku core logs plugin
-  network              0.36.10 enabled    dokku core network plugin
-  nginx-vhosts         0.36.10 enabled    dokku core nginx-vhosts plugin
-  plugin               0.36.10 enabled    dokku core plugin plugin
-  proxy                0.36.10 enabled    dokku core proxy plugin
-  ps                   0.36.10 enabled    dokku core ps plugin
-  repo                 0.36.10 enabled    dokku core repo plugin
-  resource             0.36.10 enabled    dokku core resource plugin
-  scheduler-docker-local 0.36.10 enabled    dokku core scheduler-docker-local plugin
-  shell                0.36.10 enabled    dokku core shell plugin
-  ssh-keys             0.36.10 enabled    dokku core ssh-keys plugin
-  storage              0.36.10 enabled    dokku core storage plugin
-  tags                 0.36.10 enabled    dokku core tags plugin
-  tar                  0.36.10 enabled    dokku core tar plugin
-  trace                0.36.10 enabled    dokku core trace plugin
+  00_dokku-standard    0.36.11 enabled    dokku core standard plugin
+  20_events            0.36.11 enabled    dokku core events logging plugin
+  app-json             0.36.11 enabled    dokku core app-json plugin
+  apps                 0.36.11 enabled    dokku core apps plugin
+  build-env            0.36.11 enabled    dokku core build-env plugin
+  buildpacks           0.36.11 enabled    dokku core buildpacks plugin
+  certs                0.36.11 enabled    dokku core certificate management plugin
+  checks               0.36.11 enabled    dokku core checks plugin
+  common               0.36.11 enabled    dokku core common plugin
+  config               0.36.11 enabled    dokku core config plugin
+  docker-options       0.36.11 enabled    dokku core docker-options plugin
+  domains              0.36.11 enabled    dokku core domains plugin
+  enter                0.36.11 enabled    dokku core enter plugin
+  git                  0.36.11 enabled    dokku core git plugin
+  logs                 0.36.11 enabled    dokku core logs plugin
+  network              0.36.11 enabled    dokku core network plugin
+  nginx-vhosts         0.36.11 enabled    dokku core nginx-vhosts plugin
+  plugin               0.36.11 enabled    dokku core plugin plugin
+  proxy                0.36.11 enabled    dokku core proxy plugin
+  ps                   0.36.11 enabled    dokku core ps plugin
+  repo                 0.36.11 enabled    dokku core repo plugin
+  resource             0.36.11 enabled    dokku core resource plugin
+  scheduler-docker-local 0.36.11 enabled    dokku core scheduler-docker-local plugin
+  shell                0.36.11 enabled    dokku core shell plugin
+  ssh-keys             0.36.11 enabled    dokku core ssh-keys plugin
+  storage              0.36.11 enabled    dokku core storage plugin
+  tags                 0.36.11 enabled    dokku core tags plugin
+  tar                  0.36.11 enabled    dokku core tar plugin
+  trace                0.36.11 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index 35ae7f59e..1f0ccdfed 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 5c02faf86..613006a2e 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.10\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index d1e8e4223..882e14b83 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -33,6 +33,6 @@
     "0.33.9",
     "0.34.9",
     "0.35.20",
-    "0.36.10"
+    "0.36.11"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 58e2f48cd..534bffad4 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.36.10-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.36.11-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index a4a6274b6..47dc1bf98 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.36.10
+docker pull dokku/dokku:0.36.11
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.36.10
+  dokku/dokku:0.36.11
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.36.10
+    image: dokku/dokku:0.36.11
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command. Note that the version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.36.10
+FROM dokku/dokku:0.36.11
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git postgres
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git redis
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 0041bf8f5..a5ef5a886 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -37,8 +37,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.36.10/bootstrap.sh
-sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.36.11/bootstrap.sh
+sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index a9ca37c4c..593796f0b 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.10</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.11</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.36.10 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index e11ca3887..d81802c40 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.10/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 5efe07d56..3f77d2252 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index 3a7ca0f6e..1c186e123 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index 73acebbf3..bc56be909 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index 434eb47b2..d358f365d 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index f18a3f484..b5c195118 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index 1595a4049..cc15320d5 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index a539a53fc..b85e199fb 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index db6be7910..d147cf86c 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index a331b9f2d..188087283 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 206aab83e..fb33f8ef4 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 54de76e7a..00589cca8 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index 71cc6cad7..87d92009b 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index 28fe006d7..dc6dabce7 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 9c31fa576..318fd1a4e 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 3371fff1a..1d5e86e2e 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index f875f0f38..3b67c6696 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 63b92ae4e..516becb23 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 3f68a3557..7b453a326 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index 1629bca64..ef622ada4 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index f6e8fafa3..2119b5da9 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index b2b160831..851cd1836 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index ab51b85ef..bba135812 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index 5a66a4b5f..2e04cc36e 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index c4dae9c8c..1b429769d 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index e2f38cb06..e6fb659f9 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 57d197c43..4ffbfec2f 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index cb3c982f2..4c8b37edb 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 239e629a9..f0ffd7645 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index c3a1f1878..6804c888e 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 9561194af..9d129b81e 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index a129136ca..0d01789cd 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index 7a82a7ffc..fac9f5809 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index 17a6e6735..188f64f92 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 7cc4dbf3f..6119c96d5 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index c25aec017..a02ad68db 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index c10cc110a..c44d55545 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index 12f9bc057..bd15e88bf 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index 653c4dbb6..95e062828 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 9378cfe06..2188633dd 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 343e4f7e9..05372c20f 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 05406a668..96e6371e4 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index c312f05cb..10464bcf0 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 127d8dd78..f2258f9b5 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 1b28a2aaf..c64e2644a 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.36.10"
+version = "0.36.11"
 [plugin.config]

From cba345025c6254e75fb45947989ac511309da085 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 8 Sep 2025 04:28:05 -0400
Subject: [PATCH 072/427] feat: add a Railpack builder to Dokku

Closes #7615
---
 Dockerfile                                    |   5 +
 docker/etc/sudoers.d/dokku-docker             |   2 +-
 docker/usr/local/bin/railpack                 |  20 +++
 docs/appendices/file-formats/railpack-json.md |   3 +
 docs/deployment/builders/railpack.md          | 163 ++++++++++++++++++
 docs/template.html                            |   1 +
 plugins/builder-railpack/builder-build        |  67 +++++++
 plugins/builder-railpack/builder-detect       |  17 ++
 plugins/builder-railpack/builder-release      |  30 ++++
 plugins/builder-railpack/commands             |  15 ++
 plugins/builder-railpack/core-post-extract    |  30 ++++
 .../dockerfiles/builder-build.Dockerfile      |   7 +
 .../dockerfiles/builder-release.Dockerfile    |   2 +
 plugins/builder-railpack/help-functions       |  33 ++++
 plugins/builder-railpack/install              |  16 ++
 plugins/builder-railpack/internal-functions   | 116 +++++++++++++
 plugins/builder-railpack/plugin.toml          |   4 +
 plugins/builder-railpack/post-app-clone-setup |  14 ++
 .../builder-railpack/post-app-rename-setup    |  15 ++
 plugins/builder-railpack/post-delete          |  15 ++
 plugins/builder-railpack/report               |   6 +
 plugins/builder-railpack/subcommands/default  |   6 +
 plugins/builder-railpack/subcommands/report   |   6 +
 plugins/builder-railpack/subcommands/set      |  30 ++++
 plugins/docker-options/docker-args-deploy     |   2 +-
 tests/unit/builder-railpack.bats              |  52 ++++++
 tests/unit/report.bats                        |   1 +
 tests/unit/test_helper.bash                   |   6 +
 28 files changed, 682 insertions(+), 2 deletions(-)
 create mode 100644 docker/usr/local/bin/railpack
 create mode 100644 docs/appendices/file-formats/railpack-json.md
 create mode 100644 docs/deployment/builders/railpack.md
 create mode 100755 plugins/builder-railpack/builder-build
 create mode 100755 plugins/builder-railpack/builder-detect
 create mode 100755 plugins/builder-railpack/builder-release
 create mode 100755 plugins/builder-railpack/commands
 create mode 100755 plugins/builder-railpack/core-post-extract
 create mode 100644 plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
 create mode 100644 plugins/builder-railpack/dockerfiles/builder-release.Dockerfile
 create mode 100755 plugins/builder-railpack/help-functions
 create mode 100755 plugins/builder-railpack/install
 create mode 100755 plugins/builder-railpack/internal-functions
 create mode 100644 plugins/builder-railpack/plugin.toml
 create mode 100755 plugins/builder-railpack/post-app-clone-setup
 create mode 100755 plugins/builder-railpack/post-app-rename-setup
 create mode 100755 plugins/builder-railpack/post-delete
 create mode 100755 plugins/builder-railpack/report
 create mode 100755 plugins/builder-railpack/subcommands/default
 create mode 100755 plugins/builder-railpack/subcommands/report
 create mode 100755 plugins/builder-railpack/subcommands/set
 create mode 100644 tests/unit/builder-railpack.bats

diff --git a/Dockerfile b/Dockerfile
index f598c5230..f0b5b79a8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,6 +33,11 @@ RUN mkdir -p /etc/apt/keyrings \
   && NIXPACKS_BIN_DIR=/usr/bin BIN_DIR=/usr/bin /tmp/nixpacks.bash \
   && test -x /usr/bin/nixpacks \
   && rm -rf /tmp/nixpacks.bash \
+  && curl -o /tmp/railpack.bash -sSL https://railpack.com/install.sh \
+  && chmod +x /tmp/railpack.bash \
+  && RAILPACK_BIN_DIR=/usr/bin /tmp/railpack.bash \
+  && test -x /usr/bin/railpack \
+  && rm -rf /tmp/railpack.bash \
   && echo "dokku dokku/hostname string $DOKKU_HOSTNAME" | debconf-set-selections \
   && echo "dokku dokku/skip_key_file boolean $DOKKU_SKIP_KEY_FILE" | debconf-set-selections \
   && echo "dokku dokku/vhost_enable boolean $DOKKU_VHOST_ENABLE" | debconf-set-selections \
diff --git a/docker/etc/sudoers.d/dokku-docker b/docker/etc/sudoers.d/dokku-docker
index bebd88538..f3dc76faa 100644
--- a/docker/etc/sudoers.d/dokku-docker
+++ b/docker/etc/sudoers.d/dokku-docker
@@ -1 +1 @@
-dokku    ALL=NOPASSWD:SETENV:/usr/bin/docker,/usr/bin/docker-container-healthchecker,/usr/bin/docker-image-labeler,/usr/bin/lambda-builder,/usr/bin/nixpacks,/usr/bin/pack
+dokku    ALL=NOPASSWD:SETENV:/usr/bin/docker,/usr/bin/docker-container-healthchecker,/usr/bin/docker-image-labeler,/usr/bin/lambda-builder,/usr/bin/nixpacks,/usr/bin/railpack,/usr/bin/pack
diff --git a/docker/usr/local/bin/railpack b/docker/usr/local/bin/railpack
new file mode 100644
index 000000000..35bee71d2
--- /dev/null
+++ b/docker/usr/local/bin/railpack
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+set -eo pipefail
+[[ $TRACE ]] && set -x
+
+main() {
+  declare desc="re-runs railpack commands as sudo"
+  local RAILPACK_BIN=""
+  if [[ -x "/usr/bin/railpack" ]]; then
+    RAILPACK_BIN="/usr/bin/railpack"
+  fi
+
+  if [[ -z "$RAILPACK_BIN" ]]; then
+    echo "!   No railpack binary found" 1>&2
+    exit 1
+  fi
+
+  sudo -E "$RAILPACK_BIN" "$@"
+}
+
+main "$@"
diff --git a/docs/appendices/file-formats/railpack-json.md b/docs/appendices/file-formats/railpack-json.md
new file mode 100644
index 000000000..d6e390fb4
--- /dev/null
+++ b/docs/appendices/file-formats/railpack-json.md
@@ -0,0 +1,3 @@
+# railpack.json
+
+The `railpack.json` file is used to configure an application when built with the `railpack` builder. Please refer to the [railpack.json documentation](https://railpack.com/config/file) for more information.
diff --git a/docs/deployment/builders/railpack.md b/docs/deployment/builders/railpack.md
new file mode 100644
index 000000000..3483c7d72
--- /dev/null
+++ b/docs/deployment/builders/railpack.md
@@ -0,0 +1,163 @@
+# Railpack
+
+> [!IMPORTANT]
+> New as of 0.32.0
+
+The `railpack` builder builds apps via [Railpack](https://railpack.com/), a buildpack alternative.
+
+## Usage
+
+### Requirements
+
+The `railpack` cli tool is not included by default with Dokku or as a dependency. It must also be installed as shown on [this page](https://railpack.com/installation).
+
+Builds will proceed with the `railpack` cli for the app from then on.
+
+### Detection
+
+This builder will be auto-detected in the following case:
+
+- A `railpack.json` exists in the root of the app repository.
+
+The builder may also be selected via the `builder:set` command
+
+```shell
+dokku builder:set node-js-app selected railpack
+```
+
+### Supported languages
+
+See the [upstream railpack documentation](https://railpack.com/) for further information on what languages and frameworks are supported.
+
+### Build-time configuration variables
+
+For security reasons - and as per [Docker recommendations](https://github.com/docker/docker/issues/13490) - railpack-based deploys have variables available only during runtime.
+
+For users that require customization in the `build` phase, you may use build arguments via the [docker-options plugin](/docs/advanced-usage/docker-options.md). All environment variables set by the `config` plugin are automatically exported within the railpack build environment, and thus `--env` only requires setting a key without a value.
+
+```shell
+dokku docker-options:add node-js-app build '--env NODE_ENV'
+```
+
+Alternatively, a full value may be provided in the form of `--env KEY=VALUE`:
+
+```shell
+dokku docker-options:add node-js-app build '--env NODE_ENV=production'
+```
+
+### Changing the `railpack.json` location
+
+The `railpack.json` is expected to be found in a specific directory, depending on the deploy approach:
+
+- The `WORKDIR` of the Docker image for deploys resulting from `git:from-image` and `git:load-image` commands.
+- The root of the source code tree for all other deploys (git push, `git:from-archive`, `git:sync`).
+
+Sometimes it may be desirable to set a different path for a given app, e.g. when deploying from a monorepo. This can be done via the `railpackjson-path` property:
+
+```shell
+dokku builder-railpack:set node-js-app railpackjson-path .dokku/railpack.json
+```
+
+The value is the path to the desired file *relative* to the base search directory, and will never be treated as absolute paths in any context. If that file does not exist within the repository, the build will fail.
+
+The default value may be set by passing an empty value for the option:
+
+```shell
+dokku builder-railpack:set node-js-app railpackjson-path
+```
+
+The `railpackjson-path` property can also be set globally. The global default is `railpack.json`, and the global value is used when no app-specific value is set.
+
+```shell
+dokku builder-railpack:set --global railpackjson-path railpack2.json
+```
+
+The default value may be set by passing an empty value for the option.
+
+```shell
+dokku builder-railpack:set --global railpackjson-path
+```
+
+### Disabling cache
+
+Cache is enabled by default, but can be disabled by setting the `no-cache` property to `true`:
+
+```shell
+dokku builder-railpack:set node-js-app no-cache true
+```
+
+The default value may be set by passing an empty value for the option:
+
+```shell
+dokku builder-railpack:set node-js-app no-cache
+```
+
+The `no-cache` property can also be set globally. The global default is `false`, and the global value is used when no app-specific value is set.
+
+```shell
+dokku builder-railpack:set --global no-cache true
+```
+
+The default value may be set by passing an empty value for the option.
+
+```shell
+dokku builder-railpack:set --global no-cache
+```
+
+### Displaying builder-railpack reports for an app
+
+You can get a report about the app's storage status using the `builder-railpack:report` command:
+
+```shell
+dokku builder-railpack:report
+```
+
+```
+=====> node-js-app builder-railpack information
+       Builder-railpack computed railpackjson path: railpack2.json
+       Builder-railpack global railpackjson path:   railpack.json
+       Builder-railpack railpackjson path:          railpack2.json
+       Builder-railpack computed no cache:          true
+       Builder-railpack global no cache:            false
+       Builder-railpack no cache:                   true
+=====> python-sample builder-railpack information
+       Builder-railpack computed railpackjson path: railpack.json
+       Builder-railpack global railpackjson path:   railpack.json
+       Builder-railpack railpackjson path:
+       Builder-railpack computed no cache:          false
+       Builder-railpack global no cache:            false
+       Builder-railpack no cache:
+=====> ruby-sample builder-railpack information
+       Builder-railpack computed railpackjson path: railpack.json
+       Builder-railpack global railpackjson path:   railpack.json
+       Builder-railpack railpackjson path:
+       Builder-railpack computed no cache:          false
+       Builder-railpack global no cache:            false
+       Builder-railpack no cache:
+```
+
+You can run the command for a specific app also.
+
+```shell
+dokku builder-railpack:report node-js-app
+```
+
+```
+=====> node-js-app builder-railpack information
+       Builder-railpack computed railpackjson path: railpack2.json
+       Builder-railpack global railpackjson path:   railpack.json
+       Builder-railpack railpackjson path:          railpack2.json
+       Builder-railpack computed no cache:          true
+       Builder-railpack global no cache:            false
+       Builder-railpack no cache:                   true
+```
+
+You can pass flags which will output only the value of the specific information you want. For example:
+
+```shell
+dokku builder-railpack:report node-js-app --builder-railpack-no-cache
+```
+
+```
+true
+```
diff --git a/docs/template.html b/docs/template.html
index d81802c40..9e26b3759 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -150,6 +150,7 @@
             <a href="/{{NAME}}/deployment/builders/lambda/" class="list-group-item">Lambda Builder</a>
             <a href="/{{NAME}}/deployment/builders/nixpacks/" class="list-group-item">Nixpacks Builder</a>
             <a href="/{{NAME}}/deployment/builders/null/" class="list-group-item">Null Builder</a>
+            <a href="/{{NAME}}/deployment/builders/railpack/" class="list-group-item">Railpack Builder</a>
 
             <a href="#" class="list-group-item disabled">Deployment Methods</a>
             <a href="/{{NAME}}/deployment/methods/git/" class="list-group-item">Git Deployment</a>
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
new file mode 100755
index 000000000..c1664fcac
--- /dev/null
+++ b/plugins/builder-railpack/builder-build
@@ -0,0 +1,67 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/builder-railpack/internal-functions"
+source "$PLUGIN_AVAILABLE_PATH/config/functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-builder-build() {
+  declare desc="builder-railpack builder-build plugin trigger"
+  declare trigger="builder-build"
+  declare BUILDER_TYPE="$1" APP="$2" SOURCECODE_WORK_DIR="$3"
+
+  if [[ "$BUILDER_TYPE" != "railpack" ]]; then
+    return
+  fi
+
+  dokku_log_info1 "Building $APP from railpack"
+
+  if ! command -v "railpack" &>/dev/null; then
+    dokku_log_fail "Missing railpack, install it"
+  fi
+
+  local IMAGE=$(get_app_image_name "$APP")
+  local DOCKER_BUILD_LABEL_ARGS=("--label=dokku" "--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP")
+
+  pushd "$SOURCECODE_WORK_DIR" &>/dev/null
+
+  plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
+
+  no_cache="$(fn-builder-railpack-computed-no-cache "$APP")"
+  RAILPACK_ARGS=""
+  if [[ "$no_cache" == "true" ]]; then
+    RAILPACK_ARGS="$RAILPACK_ARGS --no-cache"
+  fi
+
+  local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
+  DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
+
+  # strip --link, --volume and -v args from DOCKER_ARGS
+  local DOCKER_ARGS=$(sed -e "s/^--link=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--link[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^-v[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" <<<"$DOCKER_ARGS")
+  declare -a ARG_ARRAY
+  eval "ARG_ARRAY=($DOCKER_ARGS)"
+
+  eval "$(config_export app "$APP" --merged)"
+
+  if [[ -f "$SOURCECODE_WORK_DIR/Procfile" ]]; then
+    if procfile-util exists --process-type release; then
+      procfile-util delete --process-type release
+    fi
+  fi
+
+  # shellcheck disable=SC2086
+  if ! railpack build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS "${ARG_ARRAY[@]}" $RAILPACK_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+    dokku_log_warn "Failure building image"
+    return 1
+  fi
+
+  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+    dokku_log_warn "Failure injecting docker labels and custom entrypoint on image"
+    return 1
+  fi
+
+  plugn trigger post-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
+  popd &>/dev/null || pushd "/tmp" >/dev/null
+}
+
+trigger-builder-railpack-builder-build "$@"
diff --git a/plugins/builder-railpack/builder-detect b/plugins/builder-railpack/builder-detect
new file mode 100755
index 000000000..1ba0b89ba
--- /dev/null
+++ b/plugins/builder-railpack/builder-detect
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/config/functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-builder-detect() {
+  declare desc="builder-railpack builder-detect plugin trigger"
+  declare trigger="builder-detect"
+  declare APP="$1" SOURCECODE_WORK_DIR="$2"
+
+  if [[ -f "$SOURCECODE_WORK_DIR/railpack.json" ]]; then
+    echo "railpack"
+    return
+  fi
+}
+
+trigger-builder-railpack-builder-detect "$@"
diff --git a/plugins/builder-railpack/builder-release b/plugins/builder-railpack/builder-release
new file mode 100755
index 000000000..7c3650421
--- /dev/null
+++ b/plugins/builder-railpack/builder-release
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-builder-release() {
+  declare desc="builder-railpack builder-release plugin trigger"
+  declare trigger="builder-release"
+  declare BUILDER_TYPE="$1" APP="$2" IMAGE_TAG="$3"
+
+  if [[ "$BUILDER_TYPE" != "railpack" ]]; then
+    return
+  fi
+
+  local IMAGE=$(get_app_image_name "$APP" "$IMAGE_TAG")
+  plugn trigger pre-release-builder "$BUILDER_TYPE" "$APP" "$IMAGE"
+
+  TMP_WORK_DIR="$(mktemp -d "/tmp/dokku-${DOKKU_PID}-${FUNCNAME[0]}.XXXXXX")"
+  trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
+
+  local DOCKER_BUILD_LABEL_ARGS="--label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.app-name=$APP  --label=com.dokku.image-stage=release --label=dokku"
+  if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
+    dokku_log_warn "Failure injecting docker labels on image"
+    return 1
+  fi
+
+  plugn trigger post-release-builder "$BUILDER_TYPE" "$APP" "$IMAGE"
+}
+
+trigger-builder-railpack-builder-release "$@"
diff --git a/plugins/builder-railpack/commands b/plugins/builder-railpack/commands
new file mode 100755
index 000000000..db753d311
--- /dev/null
+++ b/plugins/builder-railpack/commands
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+source "$PLUGIN_AVAILABLE_PATH/builder-railpack/help-functions"
+
+case "$1" in
+  help | builder-railpack:help)
+    cmd-builder-railpack-help "$@"
+    ;;
+
+  *)
+    exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+    ;;
+
+esac
diff --git a/plugins/builder-railpack/core-post-extract b/plugins/builder-railpack/core-post-extract
new file mode 100755
index 000000000..ad863c076
--- /dev/null
+++ b/plugins/builder-railpack/core-post-extract
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/builder-railpack/internal-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-core-post-extract() {
+  declare desc="builder-railpack post-extract plugin trigger"
+  declare trigger="post-extract"
+  declare APP="$1" SOURCECODE_WORK_DIR="$2"
+  local NEW_RAILPACK_JSON="$(fn-builder-railpack-computed-railpackjson-path "$APP")"
+
+  pushd "$TMP_WORK_DIR" >/dev/null
+
+  if [[ -z "$NEW_RAILPACK_JSON" ]]; then
+    return
+  fi
+
+  if [[ ! -f "$NEW_RAILPACK_JSON" ]]; then
+    rm -f railpack.json
+    return
+  fi
+
+  if [[ "$NEW_RAILPACK_JSON" != "railpack.json" ]]; then
+    mv "$NEW_RAILPACK_JSON" railpack.json
+  fi
+  popd &>/dev/null || pushd "/tmp" >/dev/null
+}
+
+trigger-builder-railpack-core-post-extract "$@"
diff --git a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
new file mode 100644
index 000000000..57aa80d1c
--- /dev/null
+++ b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
@@ -0,0 +1,7 @@
+ARG APP_IMAGE
+FROM $APP_IMAGE
+
+RUN printf '#!/usr/bin/env bash\nexec bash -l -c -- \"$*\"\n' > /usr/local/bin/entrypoint && \
+    chmod +x /usr/local/bin/entrypoint
+
+ENTRYPOINT ["/usr/local/bin/entrypoint"]
diff --git a/plugins/builder-railpack/dockerfiles/builder-release.Dockerfile b/plugins/builder-railpack/dockerfiles/builder-release.Dockerfile
new file mode 100644
index 000000000..cca256f21
--- /dev/null
+++ b/plugins/builder-railpack/dockerfiles/builder-release.Dockerfile
@@ -0,0 +1,2 @@
+ARG APP_IMAGE
+FROM $APP_IMAGE
diff --git a/plugins/builder-railpack/help-functions b/plugins/builder-railpack/help-functions
new file mode 100755
index 000000000..ef1811401
--- /dev/null
+++ b/plugins/builder-railpack/help-functions
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-builder-railpack-help() {
+  declare desc="help command"
+  declare CMD="$1"
+  local plugin_name="builder-railpack"
+  local plugin_description="Manage the railpack builder integration for an app"
+
+  if [[ "$CMD" == "${plugin_name}:help" ]]; then
+    echo -e "Usage: dokku ${plugin_name}[:COMMAND]"
+    echo ''
+    echo "$plugin_description"
+    echo ''
+    echo 'Additional commands:'
+    fn-help-content | sort | column -c2 -t -s,
+  elif [[ $(ps -o command= $PPID) == *"--all"* ]]; then
+    fn-help-content
+  else
+    cat <<help_desc
+    $plugin_name, $plugin_description
+help_desc
+  fi
+}
+
+fn-help-content() {
+  declare desc="return help content"
+  cat <<help_content
+    builder-railpack:report [<app>] [<flag>], Displays a builder-railpack report for one or more apps
+    builder-railpack:set <app> <property> (<value>), Set or clear a builder-railpack property for an app
+help_content
+}
diff --git a/plugins/builder-railpack/install b/plugins/builder-railpack/install
new file mode 100755
index 000000000..283188a33
--- /dev/null
+++ b/plugins/builder-railpack/install
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-install() {
+  declare desc="installs the builder-railpack plugin"
+  declare trigger="install"
+
+  fn-plugin-property-setup "builder-railpack"
+
+  mkdir -p "${DOKKU_LIB_ROOT}/data/builder-railpack"
+  chown -R "${DOKKU_SYSTEM_USER}:${DOKKU_SYSTEM_GROUP}" "${DOKKU_LIB_ROOT}/data/builder-railpack"
+}
+
+trigger-builder-railpack-install "$@"
diff --git a/plugins/builder-railpack/internal-functions b/plugins/builder-railpack/internal-functions
new file mode 100755
index 000000000..a405b2ed0
--- /dev/null
+++ b/plugins/builder-railpack/internal-functions
@@ -0,0 +1,116 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-builder-railpack-report() {
+  declare desc="displays a builder-railpack report for one or more apps"
+  declare cmd="builder-railpack:report"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1" INFO_FLAG="$2"
+
+  if [[ -n "$APP" ]] && [[ "$APP" == --* ]]; then
+    INFO_FLAG="$APP"
+    APP=""
+  fi
+
+  if [[ -z "$APP" ]] && [[ -z "$INFO_FLAG" ]]; then
+    INFO_FLAG="true"
+  fi
+
+  if [[ -z "$APP" ]]; then
+    for app in $(dokku_apps); do
+      cmd-builder-railpack-report-single "$app" "$INFO_FLAG" | tee || true
+    done
+  else
+    cmd-builder-railpack-report-single "$APP" "$INFO_FLAG"
+  fi
+}
+
+cmd-builder-railpack-report-single() {
+  declare APP="$1" INFO_FLAG="$2"
+  if [[ "$INFO_FLAG" == "true" ]]; then
+    INFO_FLAG=""
+  fi
+  verify_app_name "$APP"
+  local flag_map=(
+    "--builder-railpack-computed-railpackjson-path: $(fn-builder-railpack-computed-railpackjson-path "$APP")"
+    "--builder-railpack-global-railpackjson-path: $(fn-builder-railpack-global-railpackjson-path "$APP")"
+    "--builder-railpack-railpackjson-path: $(fn-builder-railpack-railpackjson-path "$APP")"
+    "--builder-railpack-computed-no-cache: $(fn-builder-railpack-computed-no-cache "$APP")"
+    "--builder-railpack-global-no-cache: $(fn-builder-railpack-global-no-cache "$APP")"
+    "--builder-railpack-no-cache: $(fn-builder-railpack-no-cache "$APP")"
+  )
+
+  if [[ -z "$INFO_FLAG" ]]; then
+    dokku_log_info2_quiet "${APP} builder-railpack information"
+    for flag in "${flag_map[@]}"; do
+      key="$(echo "${flag#--}" | cut -f1 -d' ' | tr - ' ')"
+      dokku_log_verbose "$(printf "%-30s %-25s" "${key^}" "${flag#*: }")"
+    done
+  else
+    local match=false
+    local value_exists=false
+    for flag in "${flag_map[@]}"; do
+      valid_flags="${valid_flags} $(echo "$flag" | cut -d':' -f1)"
+      if [[ "$flag" == "${INFO_FLAG}:"* ]]; then
+        value=${flag#*: }
+        size="${#value}"
+        if [[ "$size" -ne 0 ]]; then
+          echo "$value" && match=true && value_exists=true
+        else
+          match=true
+        fi
+      fi
+    done
+    [[ "$match" == "true" ]] || dokku_log_fail "Invalid flag passed, valid flags:${valid_flags}"
+    [[ "$value_exists" == "true" ]] || dokku_log_fail "not deployed"
+  fi
+}
+
+fn-builder-railpack-computed-railpackjson-path() {
+  declare APP="$1"
+
+  file="$(fn-builder-railpack-railpackjson-path "$APP")"
+  if [[ "$file" == "" ]]; then
+    file="$(fn-builder-railpack-global-railpackjson-path "$APP")"
+  fi
+
+  echo "$file"
+}
+
+fn-builder-railpack-global-railpackjson-path() {
+  declare APP="$1"
+
+  fn-plugin-property-get "builder-railpack" "--global" "railpackjson-path" "railpack.json"
+}
+
+fn-builder-railpack-railpackjson-path() {
+  declare APP="$1"
+
+  fn-plugin-property-get "builder-railpack" "$APP" "railpackjson-path" ""
+}
+
+fn-builder-railpack-computed-no-cache() {
+  declare APP="$1"
+
+  file="$(fn-builder-railpack-no-cache "$APP")"
+  if [[ "$file" == "" ]]; then
+    file="$(fn-builder-railpack-global-no-cache "$APP")"
+  fi
+
+  echo "$file"
+}
+
+fn-builder-railpack-global-no-cache() {
+  declare APP="$1"
+
+  fn-plugin-property-get "builder-railpack" "--global" "no-cache" "false"
+}
+
+fn-builder-railpack-no-cache() {
+  declare APP="$1"
+
+  fn-plugin-property-get "builder-railpack" "$APP" "no-cache" ""
+}
diff --git a/plugins/builder-railpack/plugin.toml b/plugins/builder-railpack/plugin.toml
new file mode 100644
index 000000000..d7eceec7d
--- /dev/null
+++ b/plugins/builder-railpack/plugin.toml
@@ -0,0 +1,4 @@
+[plugin]
+description = "dokku core builder-railpack plugin"
+version = "0.36.5"
+[plugin.config]
diff --git a/plugins/builder-railpack/post-app-clone-setup b/plugins/builder-railpack/post-app-clone-setup
new file mode 100755
index 000000000..0ff83fc92
--- /dev/null
+++ b/plugins/builder-railpack/post-app-clone-setup
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-post-app-clone-setup() {
+  declare desc="sets up properties for new app"
+  declare trigger="post-app-clone-setup"
+  declare OLD_APP="$1" NEW_APP="$2"
+
+  fn-plugin-property-clone "builder-railpack" "$OLD_APP" "$NEW_APP"
+}
+
+trigger-builder-railpack-post-app-clone-setup "$@"
diff --git a/plugins/builder-railpack/post-app-rename-setup b/plugins/builder-railpack/post-app-rename-setup
new file mode 100755
index 000000000..10effd4e5
--- /dev/null
+++ b/plugins/builder-railpack/post-app-rename-setup
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-post-app-rename-setup() {
+  declare desc="updates settings for new app"
+  declare trigger="post-app-rename-setup"
+  declare OLD_APP="$1" NEW_APP="$2"
+
+  fn-plugin-property-clone "builder-railpack" "$OLD_APP" "$NEW_APP"
+  fn-plugin-property-destroy "builder-railpack" "$OLD_APP"
+}
+
+trigger-builder-railpack-post-app-rename-setup "$@"
diff --git a/plugins/builder-railpack/post-delete b/plugins/builder-railpack/post-delete
new file mode 100755
index 000000000..5879fc046
--- /dev/null
+++ b/plugins/builder-railpack/post-delete
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-builder-railpack-post-delete() {
+  declare desc="destroys the builder-railpack properties for a given app"
+  declare trigger="post-delete"
+  declare APP="$1"
+
+  fn-plugin-property-destroy "builder-railpack" "$APP"
+  rm -rf "${DOKKU_LIB_ROOT}/data/builder-railpack/$APP"
+}
+
+trigger-builder-railpack-post-delete "$@"
diff --git a/plugins/builder-railpack/report b/plugins/builder-railpack/report
new file mode 100755
index 000000000..6fbd0d855
--- /dev/null
+++ b/plugins/builder-railpack/report
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/builder-railpack/internal-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-builder-railpack-report-single "$@"
diff --git a/plugins/builder-railpack/subcommands/default b/plugins/builder-railpack/subcommands/default
new file mode 100755
index 000000000..cc0e6748a
--- /dev/null
+++ b/plugins/builder-railpack/subcommands/default
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/builder-railpack/help-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-builder-railpack-help "builder-railpack:help"
diff --git a/plugins/builder-railpack/subcommands/report b/plugins/builder-railpack/subcommands/report
new file mode 100755
index 000000000..9801d5f29
--- /dev/null
+++ b/plugins/builder-railpack/subcommands/report
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/builder-railpack/internal-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-builder-railpack-report "$@"
diff --git a/plugins/builder-railpack/subcommands/set b/plugins/builder-railpack/subcommands/set
new file mode 100755
index 000000000..6001f0c6f
--- /dev/null
+++ b/plugins/builder-railpack/subcommands/set
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-builder-railpack-set() {
+  declare desc="set or clear a builder-railpack property for an app"
+  declare cmd="builder-railpack:set"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1" KEY="$2" VALUE="$3"
+  local VALID_KEYS=("railpackjson-path" "no-cache")
+  [[ "$APP" == "--global" ]] || verify_app_name "$APP"
+
+  [[ -z "$KEY" ]] && dokku_log_fail "No key specified"
+
+  if ! fn-in-array "$KEY" "${VALID_KEYS[@]}"; then
+    dokku_log_fail "Invalid key specified, valid keys include: railpackjson-path, no-cache"
+  fi
+
+  if [[ -n "$VALUE" ]]; then
+    dokku_log_info2_quiet "Setting ${KEY} to ${VALUE}"
+    fn-plugin-property-write "builder-railpack" "$APP" "$KEY" "$VALUE"
+  else
+    dokku_log_info2_quiet "Unsetting ${KEY}"
+    fn-plugin-property-delete "builder-railpack" "$APP" "$KEY"
+  fi
+}
+
+cmd-builder-railpack-set "$@"
diff --git a/plugins/docker-options/docker-args-deploy b/plugins/docker-options/docker-args-deploy
index fc768a0cf..35ea4bc97 100755
--- a/plugins/docker-options/docker-args-deploy
+++ b/plugins/docker-options/docker-args-deploy
@@ -47,7 +47,7 @@ trigger-docker-options-docker-args() {
 
         *)
           case "$IMAGE_SOURCE_TYPE" in
-            dockerfile | nixpacks)
+            dockerfile | nixpacks | railpack)
               case "$line" in
                 --link* | -v* | --volume*)
                   continue
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
new file mode 100644
index 000000000..017123f0c
--- /dev/null
+++ b/tests/unit/builder-railpack.bats
@@ -0,0 +1,52 @@
+#!/usr/bin/env bats
+
+load test_helper
+
+setup_file() {
+  install_railpack
+}
+
+setup() {
+  create_app
+}
+
+teardown() {
+  destroy_app
+}
+
+@test "(builder-railpack:set)" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected railpack"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains "SECRET_KEY: fjdkslafjdk"
+
+  run /bin/bash -c "dokku builder-railpack:set $TEST_APP railpackjson-path nonexistent.json"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:rebuild $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains 'load build definition from Dockerfile'
+}
+
+inject_requirements_txt() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+  echo "flask" >>"$APP_REPO_DIR/requirements.txt"
+}
diff --git a/tests/unit/report.bats b/tests/unit/report.bats
index a5f7271b6..719af8c80 100644
--- a/tests/unit/report.bats
+++ b/tests/unit/report.bats
@@ -103,6 +103,7 @@ teardown() {
     builder-herokuish
     builder-lambda
     builder-nixpacks
+    builder-railpack
     builder-pack
     buildpacks
     caddy
diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 34ce53bcb..c53880f24 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -660,6 +660,12 @@ install_nixpacks() {
   fi
 }
 
+install_railpack() {
+  if ! command -v "railpack" &>/dev/null; then
+    curl -sSL https://railpack.com/install.sh | FORCE=1 bash
+  fi
+}
+
 install_k3s() {
   run /bin/bash -c "dokku proxy:set --global k3s"
   echo "output: $output"

From ee467e679357f0c6474d41e15d2fccd062bf92df Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 14 Sep 2025 21:11:59 -0400
Subject: [PATCH 073/427] fix: inject labels after the image is built by
 railpack

Railpack doesn't support the --label flag.
---
 plugins/builder-railpack/builder-build | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index c1664fcac..52bffedd4 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -50,12 +50,12 @@ trigger-builder-railpack-builder-build() {
   fi
 
   # shellcheck disable=SC2086
-  if ! railpack build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS "${ARG_ARRAY[@]}" $RAILPACK_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! railpack build "${ARG_ARRAY[@]}" $RAILPACK_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
   fi
 
-  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS  -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels and custom entrypoint on image"
     return 1
   fi

From 9f334592661eb269b2b43ebbf8d0aac848abe3ca Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 14 Sep 2025 21:43:33 -0400
Subject: [PATCH 074/427] fix: set BIN_DIR

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index f0b5b79a8..dead75810 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -35,7 +35,7 @@ RUN mkdir -p /etc/apt/keyrings \
   && rm -rf /tmp/nixpacks.bash \
   && curl -o /tmp/railpack.bash -sSL https://railpack.com/install.sh \
   && chmod +x /tmp/railpack.bash \
-  && RAILPACK_BIN_DIR=/usr/bin /tmp/railpack.bash \
+  && RAILPACK_BIN_DIR=/usr/bin BIN_DIR=/usr/bin /tmp/railpack.bash \
   && test -x /usr/bin/railpack \
   && rm -rf /tmp/railpack.bash \
   && echo "dokku dokku/hostname string $DOKKU_HOSTNAME" | debconf-set-selections \

From 6b27f424db4784643816727cbb68e6c1b6c57b00 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 14 Sep 2025 21:43:39 -0400
Subject: [PATCH 075/427] fix: remove extra space

---
 plugins/builder-railpack/builder-build | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 52bffedd4..b64dce3a6 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -55,7 +55,7 @@ trigger-builder-railpack-builder-build() {
     return 1
   fi
 
-  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS  -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels and custom entrypoint on image"
     return 1
   fi

From 300a276ed0d43aa1e72059b2c156c4ecd221c718 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 14 Sep 2025 21:44:19 -0400
Subject: [PATCH 076/427] chore: bump version in plugin.toml

---
 plugins/builder-railpack/plugin.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/builder-railpack/plugin.toml b/plugins/builder-railpack/plugin.toml
index d7eceec7d..6fa72020b 100644
--- a/plugins/builder-railpack/plugin.toml
+++ b/plugins/builder-railpack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-railpack plugin"
-version = "0.36.5"
+version = "0.36.7"
 [plugin.config]

From 084097626557502de98775403741f057ebb91eea Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 15 Sep 2025 00:21:50 -0400
Subject: [PATCH 077/427] fix: add references to BUILDKIT_HOST for setup and
 fix tests

---
 docs/deployment/builders/railpack.md | 13 +++++++++++--
 tests/unit/builder-railpack.bats     |  8 ++++++++
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/docs/deployment/builders/railpack.md b/docs/deployment/builders/railpack.md
index 3483c7d72..dc0d634fb 100644
--- a/docs/deployment/builders/railpack.md
+++ b/docs/deployment/builders/railpack.md
@@ -9,9 +9,18 @@ The `railpack` builder builds apps via [Railpack](https://railpack.com/), a buil
 
 ### Requirements
 
-The `railpack` cli tool is not included by default with Dokku or as a dependency. It must also be installed as shown on [this page](https://railpack.com/installation).
+Before using Railpacks, the following steps must be taken:
 
-Builds will proceed with the `railpack` cli for the app from then on.
+- Install the `railpack` cli: The `railpack` cli tool is not included by default with Dokku or as a dependency. It must also be installed as shown on [this page](https://railpack.com/installation).
+- Create a `buildkit` builder: Railpack uses buildkit.
+       ```shell
+       docker run --rm --privileged -d --name buildkit moby/buildkit
+       ```
+- Set the buildkit builder: Update the `/etc/default/dokku` file to set `BUILDKIT_HOST`:
+       ```shell
+       touch /etc/default/dokku
+       echo "export BUILDKIT_HOST='docker-container://buildkit'" >> /etc/default/dokku
+       ````
 
 ### Detection
 
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 017123f0c..069960a07 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -4,6 +4,14 @@ load test_helper
 
 setup_file() {
   install_railpack
+  docker run --rm --privileged -d --name buildkit moby/buildkit:latest
+  touch /etc/default/dokku
+  sudo tee -a /etc/default/dokku <<<"export BUILDKIT_HOST='docker-container://buildkit'"
+}
+
+teardown_file() {
+  docker container stop buildkit || true
+  docker container rm buildkit || true
 }
 
 setup() {

From b21b58ed3850dad34a1777b3ec43a945a8180302 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 15 Sep 2025 00:21:58 -0400
Subject: [PATCH 078/427] fix: remove extra _

---
 tests/unit/scheduler-k3s-1.bats | 2 +-
 tests/unit/scheduler-k3s-2.bats | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/unit/scheduler-k3s-1.bats b/tests/unit/scheduler-k3s-1.bats
index f9fbcd455..b89be6d0e 100644
--- a/tests/unit/scheduler-k3s-1.bats
+++ b/tests/unit/scheduler-k3s-1.bats
@@ -11,7 +11,7 @@ setup() {
   export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
 }
 
-teardown_() {
+teardown() {
   global_teardown
   dokku nginx:start
   uninstall_k3s || true
diff --git a/tests/unit/scheduler-k3s-2.bats b/tests/unit/scheduler-k3s-2.bats
index b1c47e881..978bfa531 100644
--- a/tests/unit/scheduler-k3s-2.bats
+++ b/tests/unit/scheduler-k3s-2.bats
@@ -11,7 +11,7 @@ setup() {
   export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
 }
 
-teardown_() {
+teardown() {
   global_teardown
   dokku nginx:start
   uninstall_k3s || true

From 795e4f0f34be60fc2e1c6afc81f602810baddc5a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 22:09:07 -0400
Subject: [PATCH 079/427] fix: cleanup build image in railpack builder

Without this, it is possible to keep an old build image around in the case of failed builds, and due to missing label support, the image will never be cleaned up.
---
 plugins/builder-railpack/builder-build | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index b64dce3a6..e0716522d 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -50,16 +50,19 @@ trigger-builder-railpack-builder-build() {
   fi
 
   # shellcheck disable=SC2086
-  if ! railpack build "${ARG_ARRAY[@]}" $RAILPACK_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! railpack build "${ARG_ARRAY[@]}" $RAILPACK_ARGS --name "$IMAGE-build" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
   fi
 
-  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! suppress_output "$DOCKER_BIN" image build -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE-build" "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -t "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+    "$DOCKER_BIN" image remove "$IMAGE-build"
     dokku_log_warn "Failure injecting docker labels and custom entrypoint on image"
     return 1
   fi
 
+  "$DOCKER_BIN" image remove "$IMAGE-build"
+
   plugn trigger post-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
   popd &>/dev/null || pushd "/tmp" >/dev/null
 }

From b9025f61372a2457cf93f323846f036f7181057a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 22:09:23 -0400
Subject: [PATCH 080/427] fix: drop unnecessary entrypoint

---
 .../builder-railpack/dockerfiles/builder-build.Dockerfile    | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
index 57aa80d1c..cca256f21 100644
--- a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
+++ b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
@@ -1,7 +1,2 @@
 ARG APP_IMAGE
 FROM $APP_IMAGE
-
-RUN printf '#!/usr/bin/env bash\nexec bash -l -c -- \"$*\"\n' > /usr/local/bin/entrypoint && \
-    chmod +x /usr/local/bin/entrypoint
-
-ENTRYPOINT ["/usr/local/bin/entrypoint"]

From 5e85038d9c6fd92667bc94e93c023242753e1056 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 22:14:12 -0400
Subject: [PATCH 081/427] feat: add PrintCommand support to all task executors

---
 plugins/common/exec.go  | 5 ++++-
 plugins/common/plugn.go | 5 ++++-
 plugins/common/sftp.go  | 2 +-
 plugins/common/ssh.go   | 3 ++-
 4 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/plugins/common/exec.go b/plugins/common/exec.go
index c5790ba6e..367449b8b 100644
--- a/plugins/common/exec.go
+++ b/plugins/common/exec.go
@@ -29,6 +29,9 @@ type ExecCommandInput struct {
 	// Env is the environment variables to pass to the command
 	Env map[string]string
 
+	// PrintCommand prints the command before executing
+	PrintCommand bool
+
 	// Stdin is the stdin of the command
 	Stdin io.Reader
 
@@ -141,7 +144,7 @@ func CallExecCommandWithContext(ctx context.Context, input ExecCommandInput) (Ex
 		cmd.Cwd = input.WorkingDirectory
 	}
 
-	if os.Getenv("DOKKU_TRACE") == "1" {
+	if input.PrintCommand || os.Getenv("DOKKU_TRACE") == "1" {
 		argsSt := ""
 		if len(cmd.Args) > 0 {
 			argsSt = strings.Join(cmd.Args, " ")
diff --git a/plugins/common/plugn.go b/plugins/common/plugn.go
index 8ce905ac5..4acf58a21 100644
--- a/plugins/common/plugn.go
+++ b/plugins/common/plugn.go
@@ -19,6 +19,9 @@ type PlugnTriggerInput struct {
 	// Env is the environment variables to pass to the trigger
 	Env map[string]string
 
+	// PrintCommand prints the command before executing
+	PrintCommand bool
+
 	// Stdin is the stdin of the command
 	Stdin io.Reader
 
@@ -55,7 +58,7 @@ func CallPlugnTriggerWithContext(ctx context.Context, input PlugnTriggerInput) (
 		StreamStderr:       input.StreamStderr,
 	})
 
-	if os.Getenv("DOKKU_TRACE") == "1" {
+	if input.PrintCommand || os.Getenv("DOKKU_TRACE") == "1" {
 		for _, line := range strings.Split(result.Stderr, "\n") {
 			LogDebug(fmt.Sprintf("plugn trigger %s stderr: %s", input.Trigger, line))
 		}
diff --git a/plugins/common/sftp.go b/plugins/common/sftp.go
index 1d8ade339..2758ff4e3 100644
--- a/plugins/common/sftp.go
+++ b/plugins/common/sftp.go
@@ -219,7 +219,7 @@ func (task SftpCopyTask) Execute(ctx context.Context) (SftpCopyResult, error) {
 		}, ctx.Err()
 	}
 
-	if task.PrintCommand {
+	if task.PrintCommand || os.Getenv("DOKKU_TRACE") == "1" {
 		LogDebug(fmt.Sprintf("ssh %s@%s cp %s %v", task.Username, task.Hostname, task.SourcePath, task.DestinationPath))
 	}
 
diff --git a/plugins/common/ssh.go b/plugins/common/ssh.go
index c23f63bc9..f823c75c3 100644
--- a/plugins/common/ssh.go
+++ b/plugins/common/ssh.go
@@ -203,6 +203,7 @@ type SshTask struct {
 
 	// PrintCommand prints the command before executing
 	PrintCommand bool
+
 	// StreamStdio prints stdout and stderr directly to os.Stdout/err as
 	// the command runs.
 	StreamStdio bool
@@ -334,7 +335,7 @@ func (task SshTask) Execute(ctx context.Context) (SshResult, error) {
 		command = "sudo"
 	}
 
-	if task.PrintCommand {
+	if task.PrintCommand || os.Getenv("DOKKU_TRACE") == "1" {
 		LogDebug(fmt.Sprintf("ssh %s@%s %s %v", task.Username, task.Hostname, command, commandArgs))
 	}
 

From 9af8ec2accc934e58c583b3cb22762d3013bcaff Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 23:07:14 -0400
Subject: [PATCH 082/427] fix: re-add entrypoint

It is broken but we still want something like this...
---
 .../builder-railpack/dockerfiles/builder-build.Dockerfile   | 5 +++++
 plugins/builder-railpack/dockerfiles/entrypoint             | 6 ++++++
 2 files changed, 11 insertions(+)
 create mode 100755 plugins/builder-railpack/dockerfiles/entrypoint

diff --git a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
index cca256f21..540af37c5 100644
--- a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
+++ b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
@@ -1,2 +1,7 @@
 ARG APP_IMAGE
 FROM $APP_IMAGE
+
+RUN printf '#!/usr/bin/env bash\nset -x\nexec bash -l -c -- \"$*\"\n' > /usr/local/bin/entrypoint && \
+    chmod +x /usr/local/bin/entrypoint
+
+ENTRYPOINT ["/usr/local/bin/entrypoint"]
diff --git a/plugins/builder-railpack/dockerfiles/entrypoint b/plugins/builder-railpack/dockerfiles/entrypoint
new file mode 100755
index 000000000..f457dd278
--- /dev/null
+++ b/plugins/builder-railpack/dockerfiles/entrypoint
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+echo "#!/usr/bin/env bash" > /tmp/cmd
+echo "" >> /tmp/cmd
+echo "$@" >> /tmp/cmd
+exec bash "$@"

From b4fbf7189e1469c32e6b6aea964a045e38d0624b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 23:39:36 -0400
Subject: [PATCH 083/427] fix: update tests

---
 tests/unit/builder-railpack.bats | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 069960a07..d92916ef7 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -37,7 +37,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains 'Successfully built image in'
   assert_output_contains "SECRET_KEY: fjdkslafjdk"
 
   run /bin/bash -c "dokku builder-railpack:set $TEST_APP railpackjson-path nonexistent.json"
@@ -49,7 +49,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains 'Successfully built image in'
 }
 
 inject_requirements_txt() {

From 3c6ace7d68740e018e8aeaea39eb5c8c8c08f835 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 23:39:47 -0400
Subject: [PATCH 084/427] tests: add global setup/teardown

---
 tests/unit/builder-railpack.bats | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index d92916ef7..e0dcc5f6c 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -3,6 +3,7 @@
 load test_helper
 
 setup_file() {
+  global_setup
   install_railpack
   docker run --rm --privileged -d --name buildkit moby/buildkit:latest
   touch /etc/default/dokku
@@ -20,6 +21,7 @@ setup() {
 
 teardown() {
   destroy_app
+  global_teardown
 }
 
 @test "(builder-railpack:set)" {

From e5196a2f0365536ffb577295ab2febfd5a73d200 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 23:40:10 -0400
Subject: [PATCH 085/427] fix: remove entrypoint to ensure we can pass commands
 as arrays instead of quoted strings

---
 .../builder-railpack/dockerfiles/builder-build.Dockerfile    | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
index 540af37c5..185c7e950 100644
--- a/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
+++ b/plugins/builder-railpack/dockerfiles/builder-build.Dockerfile
@@ -1,7 +1,4 @@
 ARG APP_IMAGE
 FROM $APP_IMAGE
 
-RUN printf '#!/usr/bin/env bash\nset -x\nexec bash -l -c -- \"$*\"\n' > /usr/local/bin/entrypoint && \
-    chmod +x /usr/local/bin/entrypoint
-
-ENTRYPOINT ["/usr/local/bin/entrypoint"]
+ENTRYPOINT []

From f2abbad5b793a6d762bbd0ce5d958fc702f8a81d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 16 Sep 2025 23:51:58 -0400
Subject: [PATCH 086/427] chore: remove unused entrypoint file

---
 plugins/builder-railpack/dockerfiles/entrypoint | 6 ------
 1 file changed, 6 deletions(-)
 delete mode 100755 plugins/builder-railpack/dockerfiles/entrypoint

diff --git a/plugins/builder-railpack/dockerfiles/entrypoint b/plugins/builder-railpack/dockerfiles/entrypoint
deleted file mode 100755
index f457dd278..000000000
--- a/plugins/builder-railpack/dockerfiles/entrypoint
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-
-echo "#!/usr/bin/env bash" > /tmp/cmd
-echo "" >> /tmp/cmd
-echo "$@" >> /tmp/cmd
-exec bash "$@"

From 551eae0c5b285b1a242459974866905cf2eafb9a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 14 Sep 2025 20:59:57 -0400
Subject: [PATCH 087/427] chore: remove references to pack being experimental

It is no longer experimental and is here to stay.
---
 .../builders/cloud-native-buildpacks.md         | 17 ++++-------------
 plugins/builder-pack/builder-detect             |  5 -----
 plugins/common/functions                        |  5 -----
 tests/unit/app-json.bats                        |  7 ++++++-
 tests/unit/builder.bats                         | 13 -------------
 tests/unit/ps-cnb.bats                          |  4 ++--
 tests/unit/run_1.bats                           |  7 ++++++-
 7 files changed, 18 insertions(+), 40 deletions(-)

diff --git a/docs/deployment/builders/cloud-native-buildpacks.md b/docs/deployment/builders/cloud-native-buildpacks.md
index 83a3ec407..f6a3ebb83 100644
--- a/docs/deployment/builders/cloud-native-buildpacks.md
+++ b/docs/deployment/builders/cloud-native-buildpacks.md
@@ -14,8 +14,8 @@ buildpacks:set-property [--global|<app>] <key> <value>  # Set or clear a buildpa
 
 Cloud Native Buildpacks are an evolution over the Buildpacks technology provided by the Herokuish builder. See the [herokuish buildpacks documentation](/docs/deployment/builders/herokuish-buildpacks.md) for more information on how to clear buildpack build cache for an application.
 
-> [!WARNING]
-> This functionality uses the `pack` cli from the [Cloud Native Buildpacks](https://buildpacks.io) project to build apps. As the integration is experimental in Dokku, it is likely to change over time.
+> [!NOTE]
+> This functionality uses the `pack` cli from the [Cloud Native Buildpacks](https://buildpacks.io) project to build apps.
 
 ## Usage
 
@@ -27,7 +27,7 @@ Builds will proceed with the `pack` cli for the app from then on.
 
 ### Caveats
 
-As this functionality is highly experimental, there are a number of caveats. Please note that not all issues are listed below.
+While pack is well-supported in Dokku, there are a number of caveats. Please note that not all issues are listed below.
 
 - Specifying specific buildpacks is not currently possible.
     - A future release will add support for specifying buildpacks via the `buildpacks` plugin.
@@ -41,16 +41,7 @@ As this functionality is highly experimental, there are a number of caveats. Ple
 
 ### Detection
 
-This builder will be auto-detected in either the following cases:
-
-- The `DOKKU_CNB_EXPERIMENTAL` app environment variable is set to `1`.
-
-    ```shell
-    dokku config:set --no-restart node-js-app DOKKU_CNB_EXPERIMENTAL=1
-    ```
-
-- A `project.toml` file exists in the root of the app repository.
-    - This file is consumed by `pack-cli` and used to describe how the app is built.
+This builder will be auto-detected if a `project.toml` file exists in the root of the app repository.  This file is consumed by `pack-cli` and used to describe how the app is built.
 
 The builder can also be specified via the `builder:set` command:
 
diff --git a/plugins/builder-pack/builder-detect b/plugins/builder-pack/builder-detect
index d269c11dc..4202263ef 100755
--- a/plugins/builder-pack/builder-detect
+++ b/plugins/builder-pack/builder-detect
@@ -12,11 +12,6 @@ trigger-builder-pack-builder-detect() {
     echo "pack"
     return
   fi
-
-  if [[ "$(config_get "$APP" DOKKU_CNB_EXPERIMENTAL || true)" == "1" ]]; then
-    echo "pack"
-    return
-  fi
 }
 
 trigger-builder-pack-builder-detect "$@"
diff --git a/plugins/common/functions b/plugins/common/functions
index ea1dcfe06..9a7e12c84 100755
--- a/plugins/common/functions
+++ b/plugins/common/functions
@@ -665,11 +665,6 @@ dokku_receive() {
 
   docker_cleanup "$APP"
 
-  local DOKKU_CNB_EXPERIMENTAL="$(config_get "$APP" DOKKU_CNB_EXPERIMENTAL || true)"
-  if [[ "$DOKKU_CNB_EXPERIMENTAL" == "1" ]]; then
-    IMAGE_SOURCE_TYPE="pack"
-  fi
-
   plugn trigger builder-set-property "$APP" "detected" "$IMAGE_SOURCE_TYPE"
   if ! dokku_build "$APP" "$IMAGE_SOURCE_TYPE" "$TMP_WORK_DIR"; then
     return 1
diff --git a/tests/unit/app-json.bats b/tests/unit/app-json.bats
index acdd54854..ba8325f6a 100644
--- a/tests/unit/app-json.bats
+++ b/tests/unit/app-json.bats
@@ -94,7 +94,12 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku config:set --no-restart $TEST_APP DOKKU_CNB_EXPERIMENTAL=1 SECRET_KEY=fjdkslafjdk"
+  run /bin/bash -c "dokku config:set --no-restart $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/builder.bats b/tests/unit/builder.bats
index 8d6907fd6..6cbaa790e 100644
--- a/tests/unit/builder.bats
+++ b/tests/unit/builder.bats
@@ -99,19 +99,6 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-
-  # test DOKKU_CNB_EXPERIMENTAL env var
-  run /bin/bash -c "dokku config:set $TEST_APP DOKKU_CNB_EXPERIMENTAL=1"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  chown -R dokku:dokku "$TMP"
-  run /bin/bash -c "dokku plugin:trigger builder-detect $TEST_APP $TMP"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-  assert_line 0 "pack"
 }
 
 @test "(builder) builder-detect [dockerfile]" {
diff --git a/tests/unit/ps-cnb.bats b/tests/unit/ps-cnb.bats
index c24044428..25fe17e42 100644
--- a/tests/unit/ps-cnb.bats
+++ b/tests/unit/ps-cnb.bats
@@ -17,7 +17,7 @@ teardown() {
 }
 
 @test "(ps) cnb env vars" {
-  run /bin/bash -c "dokku config:set $TEST_APP DOKKU_CNB_EXPERIMENTAL=1"
+  run /bin/bash -c "dokku config:set $TEST_APP APP_RESPECTS_ENV_VARS=1"
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -31,5 +31,5 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains '"DOKKU_CNB_EXPERIMENTAL": "1"'
+  assert_output_contains '"APP_RESPECTS_ENV_VARS": "1"'
 }
diff --git a/tests/unit/run_1.bats b/tests/unit/run_1.bats
index 91574f126..913b6de2c 100644
--- a/tests/unit/run_1.bats
+++ b/tests/unit/run_1.bats
@@ -68,7 +68,12 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku config:set --no-restart $TEST_APP DOKKU_CNB_EXPERIMENTAL=1 SECRET_KEY=fjdkslafjdk"
+  run /bin/bash -c "dokku config:set --no-restart $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
   echo "output: $output"
   echo "status: $status"
   assert_success

From e62212f810e794815c13eabd88c06700899f7da9 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 17 Sep 2025 00:57:54 -0400
Subject: [PATCH 088/427] tests: add missing global setup/teardown calls

---
 tests/unit/builder-pack.bats | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 489c7f96f..924f15538 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -7,11 +7,13 @@ setup_file() {
 }
 
 setup() {
+  global_setup
   create_app
 }
 
 teardown() {
   destroy_app
+  global_teardown
 }
 
 @test "(builder-pack:set)" {

From 68c5407ed4df66f0a8475f47e2c2c09fb1eea13e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 17 Sep 2025 00:58:30 -0400
Subject: [PATCH 089/427] tests: use already existing add_requirements_txt_cnb
 function for builder-pack deploys

---
 tests/unit/builder-pack.bats | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 924f15538..3becd43a6 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -32,7 +32,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP initialize_for_cnb
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt_cnb
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -82,7 +82,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP initialize_for_cnb
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt_cnb
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -103,11 +103,3 @@ teardown() {
   echo "status: $status"
   assert_success
 }
-
-initialize_for_cnb() {
-  local APP="$1"
-  local APP_REPO_DIR="$2"
-  [[ -z "$APP" ]] && local APP="$TEST_APP"
-  echo "flask" >>"$APP_REPO_DIR/requirements.txt"
-  mv "$APP_REPO_DIR/app-cnb.json" "$APP_REPO_DIR/app.json"
-}

From 889d237669823b9dfcd32237fd42361ef360fce7 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 17 Sep 2025 00:58:46 -0400
Subject: [PATCH 090/427] chore: combine tests and ensure that pack is selected

---
 tests/unit/builder-pack.bats | 23 +++++++++++++++++++++++
 tests/unit/ps-cnb.bats       | 35 -----------------------------------
 2 files changed, 23 insertions(+), 35 deletions(-)
 delete mode 100644 tests/unit/ps-cnb.bats

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 3becd43a6..fad2052fb 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -103,3 +103,26 @@ teardown() {
   echo "status: $status"
   assert_success
 }
+
+@test "(ps) cnb env vars" {
+  run /bin/bash -c "dokku config:set $TEST_APP APP_RESPECTS_ENV_VARS=1"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt_cnb
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "curl $(dokku url $TEST_APP)/env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains '"APP_RESPECTS_ENV_VARS": "1"'
+}
diff --git a/tests/unit/ps-cnb.bats b/tests/unit/ps-cnb.bats
deleted file mode 100644
index 25fe17e42..000000000
--- a/tests/unit/ps-cnb.bats
+++ /dev/null
@@ -1,35 +0,0 @@
-#!/usr/bin/env bats
-
-load test_helper
-
-setup_file() {
-  install_pack
-}
-
-setup() {
-  global_setup
-  create_app
-}
-
-teardown() {
-  destroy_app
-  global_teardown
-}
-
-@test "(ps) cnb env vars" {
-  run /bin/bash -c "dokku config:set $TEST_APP APP_RESPECTS_ENV_VARS=1"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt_cnb
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "curl $(dokku url $TEST_APP)/env"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-  assert_output_contains '"APP_RESPECTS_ENV_VARS": "1"'
-}

From c885205b913f54fcef0e15709591845fc203d26c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 19:48:11 -0400
Subject: [PATCH 091/427] refactor: respect the maintenance value of the cron
 task instead of skipping them

The former method would omit the CronJob objects entirely, meaning a redeploy would be necessary to re-enable them.
---
 plugins/scheduler-k3s/template.go                   |  1 +
 plugins/scheduler-k3s/templates/chart/cron-job.yaml |  2 +-
 plugins/scheduler-k3s/triggers.go                   | 10 ++--------
 3 files changed, 4 insertions(+), 9 deletions(-)

diff --git a/plugins/scheduler-k3s/template.go b/plugins/scheduler-k3s/template.go
index 835e5f35d..17eafdde5 100644
--- a/plugins/scheduler-k3s/template.go
+++ b/plugins/scheduler-k3s/template.go
@@ -302,6 +302,7 @@ type ProcessCron struct {
 	ID       string `yaml:"id"`
 	Schedule string `yaml:"schedule"`
 	Suffix   string `yaml:"suffix"`
+	Suspend  bool   `yaml:"suspend"`
 }
 
 type ProcessPortMap struct {
diff --git a/plugins/scheduler-k3s/templates/chart/cron-job.yaml b/plugins/scheduler-k3s/templates/chart/cron-job.yaml
index f44d40696..b5b4e8b88 100644
--- a/plugins/scheduler-k3s/templates/chart/cron-job.yaml
+++ b/plugins/scheduler-k3s/templates/chart/cron-job.yaml
@@ -135,6 +135,6 @@ spec:
   schedule: {{ $config.cron.schedule }}
   startingDeadlineSeconds: 60
   successfulJobsHistoryLimit: 10
-  suspend: false
+  suspend: {{ $config.cron.suspend }}
   timeZone: Etc/UTC
 {{- end }}
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index def82453f..efaba74b0 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -312,17 +312,10 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 
 	workingDir := common.GetWorkingDir(appName, image)
 
-	allCronTasks, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
+	cronTasks, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
 	if err != nil {
 		return fmt.Errorf("Error fetching cron tasks: %w", err)
 	}
-	// remove maintenance cron tasks
-	cronTasks := []cron.CronTask{}
-	for _, cronTask := range allCronTasks {
-		if !cronTask.Maintenance {
-			cronTasks = append(cronTasks, cronTask)
-		}
-	}
 
 	domains := []string{}
 	if _, ok := processes["web"]; ok {
@@ -655,6 +648,7 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 				ID:       cronTask.ID,
 				Schedule: cronTask.Schedule,
 				Suffix:   suffix,
+				Suspend:  cronEntry.Maintenance,
 			},
 			Labels:      labels,
 			ProcessType: ProcessType_Cron,

From 4a357e9896f24740d5f3f3eeb7c0ada5c52ea8ec Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 20:08:22 -0400
Subject: [PATCH 092/427] fix: properly suspend and resume k8s CronJob objects
 when executing scheduler-cron-write

---
 plugins/scheduler-k3s/Makefile                |  2 +-
 plugins/scheduler-k3s/k8s.go                  | 29 ++++++++++
 .../scheduler-k3s/src/triggers/triggers.go    |  4 ++
 plugins/scheduler-k3s/triggers.go             | 58 +++++++++++++++++++
 4 files changed, 92 insertions(+), 1 deletion(-)

diff --git a/plugins/scheduler-k3s/Makefile b/plugins/scheduler-k3s/Makefile
index e894570d5..b873f3701 100644
--- a/plugins/scheduler-k3s/Makefile
+++ b/plugins/scheduler-k3s/Makefile
@@ -1,5 +1,5 @@
 SUBCOMMANDS = subcommands/annotations:set subcommands/autoscaling-auth:set subcommands/autoscaling-auth:report subcommands/cluster-add subcommands/cluster-list subcommands/cluster-remove subcommands/ensure-charts subcommands/initialize subcommands/labels:set subcommands/report subcommands/set subcommands/show-kubeconfig subcommands/uninstall
-TRIGGERS = triggers/core-post-deploy triggers/core-post-extract triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-create triggers/post-delete triggers/report triggers/scheduler-app-status triggers/scheduler-deploy triggers/scheduler-enter triggers/scheduler-is-deployed triggers/scheduler-logs triggers/scheduler-proxy-config triggers/scheduler-proxy-logs triggers/scheduler-post-delete triggers/scheduler-run triggers/scheduler-run-list triggers/scheduler-stop
+TRIGGERS = triggers/core-post-deploy triggers/core-post-extract triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-create triggers/post-delete triggers/report triggers/scheduler-app-status triggers/scheduler-deploy triggers/scheduler-enter triggers/scheduler-is-deployed triggers/scheduler-logs triggers/scheduler-proxy-config triggers/scheduler-proxy-logs triggers/scheduler-post-delete triggers/scheduler-run triggers/scheduler-run-list triggers/scheduler-stop triggers/scheduler-cron-write
 BUILD = commands subcommands triggers
 PLUGIN_NAME = scheduler-k3s
 
diff --git a/plugins/scheduler-k3s/k8s.go b/plugins/scheduler-k3s/k8s.go
index a078f8ead..aa5a07543 100644
--- a/plugins/scheduler-k3s/k8s.go
+++ b/plugins/scheduler-k3s/k8s.go
@@ -805,6 +805,35 @@ func (k KubernetesClient) ListTriggerAuthentications(ctx context.Context, input
 	return triggerAuthentications, nil
 }
 
+// ResumeCronJobsInput contains all the information needed to resume a Kubernetes cron job
+type ResumeCronJobsInput struct {
+	// LabelSelector is the Kubernetes label selector
+	LabelSelector string
+
+	// Namespace is the Kubernetes namespace
+	Namespace string
+}
+
+// ResumeCronJobs resumes a Kubernetes cron job
+func (k KubernetesClient) ResumeCronJobs(ctx context.Context, input ResumeCronJobsInput) error {
+	cronJobs, err := k.Client.BatchV1().CronJobs(input.Namespace).List(ctx, metav1.ListOptions{
+		LabelSelector: input.LabelSelector,
+	})
+	if err != nil {
+		return err
+	}
+
+	for _, cronJob := range cronJobs.Items {
+		cronJob.Spec.Suspend = ptr.To(false)
+		_, err := k.Client.BatchV1().CronJobs(input.Namespace).Update(ctx, &cronJob, metav1.UpdateOptions{})
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
 // ScaleDeploymentInput contains all the information needed to scale a Kubernetes deployment
 type ScaleDeploymentInput struct {
 	// Name is the Kubernetes deployment name
diff --git a/plugins/scheduler-k3s/src/triggers/triggers.go b/plugins/scheduler-k3s/src/triggers/triggers.go
index dd48a6b71..15caf5146 100644
--- a/plugins/scheduler-k3s/src/triggers/triggers.go
+++ b/plugins/scheduler-k3s/src/triggers/triggers.go
@@ -123,6 +123,10 @@ func main() {
 		scheduler := flag.Arg(0)
 		appName := flag.Arg(1)
 		err = scheduler_k3s.TriggerSchedulerStop(scheduler, appName)
+	case "scheduler-cron-write":
+		scheduler := flag.Arg(0)
+		appName := flag.Arg(1)
+		err = scheduler_k3s.TriggerSchedulerCronWrite(scheduler, appName)
 	case "scheduler-post-delete":
 		scheduler := flag.Arg(0)
 		appName := flag.Arg(1)
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index efaba74b0..4ca07841f 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -163,6 +163,64 @@ func TriggerSchedulerAppStatus(scheduler string, appName string) error {
 	return nil
 }
 
+// TriggerSchedulerCronWrite writes out cron entries for a given application
+func TriggerSchedulerCronWrite(scheduler string, appName string) error {
+	if scheduler != "k3s" {
+		return nil
+	}
+
+	allCronEntries, err := cron.FetchCronEntries(cron.FetchCronEntriesInput{AppName: appName})
+	if err != nil {
+		return fmt.Errorf("Error fetching cron entries: %w", err)
+	}
+
+	ctx, cancel := context.WithCancel(context.Background())
+	signals := make(chan os.Signal, 1)
+	signal.Notify(signals, os.Interrupt, syscall.SIGHUP,
+		syscall.SIGINT,
+		syscall.SIGQUIT,
+		syscall.SIGTERM)
+	go func() {
+		<-signals
+		common.LogWarn(fmt.Sprintf("Deployment of %s has been cancelled", appName))
+		cancel()
+	}()
+
+	namespace := getComputedNamespace(appName)
+
+	clientset, err := NewKubernetesClient()
+	if err != nil {
+		return fmt.Errorf("Error creating kubernetes client: %w", err)
+	}
+
+	for _, cronEntry := range allCronEntries {
+		labelSelector := []string{
+			fmt.Sprintf("app.kubernetes.io/part-of=%s", appName),
+			fmt.Sprintf("dokku.com/cron-id=%s", cronEntry.ID),
+		}
+
+		if cronEntry.Maintenance {
+			err = clientset.SuspendCronJobs(ctx, SuspendCronJobsInput{
+				Namespace:     namespace,
+				LabelSelector: strings.Join(labelSelector, ","),
+			})
+			if err != nil {
+				return fmt.Errorf("Error suspending cron jobs: %w", err)
+			}
+		} else {
+			err = clientset.ResumeCronJobs(ctx, ResumeCronJobsInput{
+				Namespace:     namespace,
+				LabelSelector: strings.Join(labelSelector, ","),
+			})
+			if err != nil {
+				return fmt.Errorf("Error resuming cron jobs: %w", err)
+			}
+		}
+	}
+
+	return nil
+}
+
 // TriggerSchedulerDeploy deploys an image tag for a given application
 func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) error {
 	if scheduler != "k3s" {

From e42df29a790ab9711d66afa7bc3b2725f7a4f5d4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 20:14:50 -0400
Subject: [PATCH 093/427] feat: allow specifying maintenance mode in the file
 or not

If the app's cron tasks are set to maintenance mode, then the task is set to maintenance mode regardless.
---
 docs/appendices/file-formats/app-json.md |  1 +
 docs/processes/scheduled-cron-tasks.md   |  1 +
 plugins/app-json/appjson.go              |  3 +++
 plugins/cron/cron.go                     |  5 +++--
 plugins/scheduler-k3s/triggers.go        | 10 +++++-----
 5 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/docs/appendices/file-formats/app-json.md b/docs/appendices/file-formats/app-json.md
index 189a892b8..c7500e19f 100644
--- a/docs/appendices/file-formats/app-json.md
+++ b/docs/appendices/file-formats/app-json.md
@@ -21,6 +21,7 @@
 (list, optional) A list of cron resources. Keys are the names of the process types. The values are an object containing one or more of the following properties:
 
 - `command`: (string, required)
+- `maintenance`: (boolean, optional)
 - `schedule`: (string, required)
 
 ## Formation
diff --git a/docs/processes/scheduled-cron-tasks.md b/docs/processes/scheduled-cron-tasks.md
index f647b6edb..a8d39fdfc 100644
--- a/docs/processes/scheduled-cron-tasks.md
+++ b/docs/processes/scheduled-cron-tasks.md
@@ -34,6 +34,7 @@ The `app.json` file for a given app can define a special `cron` key that contain
 A cron task takes the following properties:
 
 - `command`: A command to be run within the built app image. Specified commands can also be `Procfile` entries.
+- `maintenance`: A boolean value that decides whether the cron task is in maintenance and therefore executable or not.
 - `schedule`: A [cron-compatible](https://en.wikipedia.org/wiki/Cron#Overview) scheduling definition upon which to run the command. Seconds are generally not supported.
 
 Zero or more cron tasks can be specified per app. Cron tasks are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index d251da4ea..ab80fb21f 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -55,6 +55,9 @@ type CronTask struct {
 	// Command is the command to execute
 	Command string `json:"command"`
 
+	// Maintenance is whether or not the cron command is in maintenance mode
+	Maintenance bool `json:"maintenance"`
+
 	// Schedule is the cron schedule to execute the command on
 	Schedule string `json:"schedule"`
 }
diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index 9fb96860c..90cbdced7 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -77,7 +77,7 @@ type FetchCronTasksInput struct {
 func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 	appName := input.AppName
 	tasks := []CronTask{}
-	isMaintenance := reportComputedMaintenance(appName) == "true"
+	isAppCronInMaintenance := reportComputedMaintenance(appName) == "true"
 
 	if input.AppJSON == nil && input.AppName == "" {
 		return tasks, fmt.Errorf("Missing app name or app.json")
@@ -121,12 +121,13 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 			return tasks, fmt.Errorf("Invalid cron schedule for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
 		}
 
+		maintenance := isAppCronInMaintenance || c.Maintenance
 		tasks = append(tasks, CronTask{
 			App:         appName,
 			Command:     c.Command,
 			Schedule:    c.Schedule,
 			ID:          GenerateCommandID(appName, c),
-			Maintenance: isMaintenance,
+			Maintenance: maintenance,
 		})
 	}
 
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 4ca07841f..7a2e0e030 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -169,7 +169,7 @@ func TriggerSchedulerCronWrite(scheduler string, appName string) error {
 		return nil
 	}
 
-	allCronEntries, err := cron.FetchCronEntries(cron.FetchCronEntriesInput{AppName: appName})
+	cronTasks, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
 	if err != nil {
 		return fmt.Errorf("Error fetching cron entries: %w", err)
 	}
@@ -193,13 +193,13 @@ func TriggerSchedulerCronWrite(scheduler string, appName string) error {
 		return fmt.Errorf("Error creating kubernetes client: %w", err)
 	}
 
-	for _, cronEntry := range allCronEntries {
+	for _, cronTask := range cronTasks {
 		labelSelector := []string{
 			fmt.Sprintf("app.kubernetes.io/part-of=%s", appName),
-			fmt.Sprintf("dokku.com/cron-id=%s", cronEntry.ID),
+			fmt.Sprintf("dokku.com/cron-id=%s", cronTask.ID),
 		}
 
-		if cronEntry.Maintenance {
+		if cronTask.Maintenance {
 			err = clientset.SuspendCronJobs(ctx, SuspendCronJobsInput{
 				Namespace:     namespace,
 				LabelSelector: strings.Join(labelSelector, ","),
@@ -706,7 +706,7 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 				ID:       cronTask.ID,
 				Schedule: cronTask.Schedule,
 				Suffix:   suffix,
-				Suspend:  cronEntry.Maintenance,
+				Suspend:  cronTask.Maintenance,
 			},
 			Labels:      labels,
 			ProcessType: ProcessType_Cron,

From 3c7985cd82675f5389947c4379cd83cd5858a662 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 20:30:49 -0400
Subject: [PATCH 094/427] feat: track task vs app maintenance separately

We should know _where_ the maintenance value is applied for the end-user's usage
---
 plugins/cron/cron.go | 34 ++++++++++++++++++++++------------
 1 file changed, 22 insertions(+), 12 deletions(-)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index 90cbdced7..dbca27826 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -50,7 +50,13 @@ type CronTask struct {
 	// LogFile is the log file to write to
 	LogFile string `json:"-"`
 
-	// Maintenance is whether the cron task is in maintenance mode
+	// AppInMaintenance is whether the app's cron is in maintenance mode
+	AppInMaintenance bool `json:"app-in-maintenance"`
+
+	// Maintenance is whether the cron command is in maintenance mode
+	TaskInMaintenance bool `json:"task-in-maintenance"`
+
+	// Maintenance is whether the cron command is in maintenance mode
 	Maintenance bool `json:"maintenance"`
 }
 
@@ -123,11 +129,13 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 
 		maintenance := isAppCronInMaintenance || c.Maintenance
 		tasks = append(tasks, CronTask{
-			App:         appName,
-			Command:     c.Command,
-			Schedule:    c.Schedule,
-			ID:          GenerateCommandID(appName, c),
-			Maintenance: maintenance,
+			App:               appName,
+			Command:           c.Command,
+			Schedule:          c.Schedule,
+			ID:                GenerateCommandID(appName, c),
+			Maintenance:       isAppCronInMaintenance || maintenance,
+			AppInMaintenance:  isAppCronInMaintenance,
+			TaskInMaintenance: maintenance,
 		})
 	}
 
@@ -156,12 +164,14 @@ func FetchGlobalCronTasks() ([]CronTask, error) {
 
 		id := base36.EncodeToStringLc([]byte(strings.Join(parts, ";;;")))
 		task := CronTask{
-			ID:          id,
-			Schedule:    parts[0],
-			Command:     parts[1],
-			AltCommand:  parts[1],
-			Maintenance: false,
-			Global:      true,
+			ID:                id,
+			Schedule:          parts[0],
+			Command:           parts[1],
+			AltCommand:        parts[1],
+			Global:            true,
+			Maintenance:       false,
+			TaskInMaintenance: false,
+			AppInMaintenance:  false,
 		}
 		if len(parts) == 3 {
 			task.LogFile = parts[2]

From f99e3a6c9c3ffd6460a6bf2352ec7d4cc55ce406 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 20:52:57 -0400
Subject: [PATCH 095/427] feat: add ability to suspend and resume a cron task
 by ID

This takes advantage of the properties system and allows users to suspend/resume the task at will.
---
 plugins/common/properties.go                | 14 ++---
 plugins/cron/Makefile                       |  2 +-
 plugins/cron/cron.go                        | 22 +++++++-
 plugins/cron/src/subcommands/subcommands.go | 12 +++++
 plugins/cron/subcommands.go                 | 58 ++++++++++++++++++++-
 plugins/scheduler-k3s/triggers.go           |  4 +-
 6 files changed, 99 insertions(+), 13 deletions(-)

diff --git a/plugins/common/properties.go b/plugins/common/properties.go
index 637991d77..b472c24b9 100644
--- a/plugins/common/properties.go
+++ b/plugins/common/properties.go
@@ -12,27 +12,27 @@ import (
 )
 
 // CommandPropertySet is a generic function that will set a property for a given plugin/app combination
-func CommandPropertySet(pluginName, appName, property, value string, properties map[string]string, globalProperties map[string]bool) {
+func CommandPropertySet(pluginName, appName, property, value string, validProperties map[string]string, validGlobalProperties map[string]bool) {
 	if appName != "--global" {
 		if err := VerifyAppName(appName); err != nil {
 			LogFailWithError(err)
 		}
 	}
-	if appName == "--global" && !globalProperties[property] {
+	if appName == "--global" && !validGlobalProperties[property] {
 		LogFail("Property cannot be specified globally")
 	}
 	if property == "" {
 		LogFail("No property specified")
 	}
 
-	for k := range globalProperties {
-		if _, ok := properties[k]; !ok {
-			properties[k] = ""
+	for k := range validGlobalProperties {
+		if _, ok := validProperties[k]; !ok {
+			validProperties[k] = ""
 		}
 	}
 
-	if _, ok := properties[property]; !ok {
-		properties := reflect.ValueOf(properties).MapKeys()
+	if _, ok := validProperties[property]; !ok {
+		properties := reflect.ValueOf(validProperties).MapKeys()
 		validPropertyList := make([]string, len(properties))
 		for i := 0; i < len(properties); i++ {
 			validPropertyList[i] = properties[i].String()
diff --git a/plugins/cron/Makefile b/plugins/cron/Makefile
index 98eeb5fd2..46513788c 100644
--- a/plugins/cron/Makefile
+++ b/plugins/cron/Makefile
@@ -1,4 +1,4 @@
-SUBCOMMANDS = subcommands/list subcommands/report subcommands/run subcommands/set
+SUBCOMMANDS = subcommands/list subcommands/report cron/resume subcommands/run subcommands/set subcommands/suspend
 TRIGGERS = triggers/app-json-is-valid triggers/cron-get-property triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-delete triggers/scheduler-stop
 BUILD = commands subcommands triggers
 PLUGIN_NAME = cron
diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index dbca27826..de19d07b3 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -2,6 +2,7 @@ package cron
 
 import (
 	"fmt"
+	"strconv"
 	"strings"
 
 	appjson "github.com/dokku/dokku/plugins/app-json"
@@ -27,6 +28,8 @@ var (
 	}
 )
 
+const MaintenancePropertyPrefix = "maintenance."
+
 // CronTask is a struct that represents a cron task
 type CronTask struct {
 	// ID is a unique identifier for the cron task
@@ -102,6 +105,11 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 		return tasks, nil
 	}
 
+	properties, err := common.PropertyGetAllByPrefix("cron", appName, MaintenancePropertyPrefix)
+	if err != nil {
+		return tasks, fmt.Errorf("Error getting maintenance properties: %w", err)
+	}
+
 	for i, c := range input.AppJSON.Cron {
 		if c.Command == "" {
 			if input.WarnToFailure {
@@ -127,7 +135,19 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 			return tasks, fmt.Errorf("Invalid cron schedule for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
 		}
 
-		maintenance := isAppCronInMaintenance || c.Maintenance
+		maintenance := c.Maintenance
+		if value, ok := properties[MaintenancePropertyPrefix+c.Schedule]; ok {
+			boolValue, err := strconv.ParseBool(value)
+			if err != nil {
+				return tasks, fmt.Errorf("Invalid maintenance property for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
+			}
+
+			// only override the maintenance value if the property is set to true
+			if boolValue {
+				maintenance = boolValue
+			}
+		}
+
 		tasks = append(tasks, CronTask{
 			App:               appName,
 			Command:           c.Command,
diff --git a/plugins/cron/src/subcommands/subcommands.go b/plugins/cron/src/subcommands/subcommands.go
index 329b240e8..c9452ee05 100644
--- a/plugins/cron/src/subcommands/subcommands.go
+++ b/plugins/cron/src/subcommands/subcommands.go
@@ -37,6 +37,12 @@ func main() {
 			appName := args.Arg(0)
 			err = cron.CommandReport(appName, *format, infoFlag)
 		}
+	case "resume":
+		args := flag.NewFlagSet("cron:resume", flag.ExitOnError)
+		args.Parse(os.Args[2:])
+		appName := args.Arg(0)
+		cronID := args.Arg(1)
+		err = cron.CommandResume(appName, cronID)
 	case "run":
 		args := flag.NewFlagSet("cron:run", flag.ExitOnError)
 		detached := args.Bool("detach", false, "--detach: run the container in a detached mode")
@@ -57,6 +63,12 @@ func main() {
 			value = args.Arg(1)
 		}
 		err = cron.CommandSet(appName, property, value)
+	case "suspend":
+		args := flag.NewFlagSet("cron:suspend", flag.ExitOnError)
+		args.Parse(os.Args[2:])
+		appName := args.Arg(0)
+		cronID := args.Arg(1)
+		err = cron.CommandSuspend(appName, cronID)
 	default:
 		err = fmt.Errorf("Invalid plugin subcommand call: %s", subcommand)
 	}
diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index 1cc89342f..aef1b833e 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -5,6 +5,7 @@ import (
 	"errors"
 	"fmt"
 	"os"
+	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
 
@@ -43,7 +44,15 @@ func CommandList(appName string, format string) error {
 	if format == "stdout" {
 		output := []string{"ID | Schedule | Maintenance | Command"}
 		for _, task := range tasks {
-			output = append(output, fmt.Sprintf("%s | %s | %t | %s", task.ID, task.Schedule, task.Maintenance, task.Command))
+			maintenance := "false"
+			if task.Maintenance {
+				if task.TaskInMaintenance {
+					maintenance = "true (task)"
+				} else if task.AppInMaintenance {
+					maintenance = "true (app)"
+				}
+			}
+			output = append(output, fmt.Sprintf("%s | %s | %s | %s", task.ID, task.Schedule, maintenance, task.Command))
 		}
 
 		result := columnize.SimpleFormat(output)
@@ -82,6 +91,11 @@ func CommandReport(appName string, format string, infoFlag string) error {
 	return ReportSingleApp(appName, format, infoFlag)
 }
 
+// CommandResume resumes a cron task
+func CommandResume(appName string, cronID string) error {
+	return CommandSet(appName, fmt.Sprintf("%s%s", MaintenancePropertyPrefix, cronID), "")
+}
+
 // CommandRun executes a cron task on the fly
 func CommandRun(appName string, cronID string, detached bool) error {
 	if err := common.VerifyAppName(appName); err != nil {
@@ -138,7 +152,42 @@ func CommandSet(appName string, property string, value string) error {
 		return err
 	}
 
-	common.CommandPropertySet("cron", appName, property, value, DefaultProperties, GlobalProperties)
+	validProperties := DefaultProperties
+	globalProperties := GlobalProperties
+	if strings.HasPrefix(property, MaintenancePropertyPrefix) {
+		if appName == "--global" {
+			return fmt.Errorf("Task maintenance properties cannot be set globally")
+		}
+
+		maintenanceParts := strings.SplitN(property, ".", 2)
+		if len(maintenanceParts) != 3 {
+			return fmt.Errorf("Invalid task maintenance property, expected format: %s$ID: %s", MaintenancePropertyPrefix, property)
+		}
+
+		if maintenanceParts[1] == "" {
+			return fmt.Errorf("Invalid task maintenance property, missing ID")
+		}
+
+		tasks, err := FetchCronTasks(FetchCronTasksInput{AppName: appName})
+		if err != nil {
+			return err
+		}
+
+		maintenanceID := maintenanceParts[1]
+		for _, task := range tasks {
+			if task.ID == maintenanceID {
+				validProperties[property] = ""
+				globalProperties[property] = false
+				break
+			}
+		}
+
+		if _, ok := validProperties[property]; !ok {
+			return fmt.Errorf("Invalid task maintenance property, no matching task ID found: %s", property)
+		}
+	}
+
+	common.CommandPropertySet("cron", appName, property, value, validProperties, globalProperties)
 	scheduler := common.GetAppScheduler(appName)
 	_, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
 		Trigger:     "scheduler-cron-write",
@@ -147,3 +196,8 @@ func CommandSet(appName string, property string, value string) error {
 	})
 	return err
 }
+
+// CommandSuspend suspends a cron task
+func CommandSuspend(appName string, cronID string) error {
+	return CommandSet(appName, fmt.Sprintf("%s%s", MaintenancePropertyPrefix, cronID), "true")
+}
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 7a2e0e030..626f11a5d 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -163,7 +163,7 @@ func TriggerSchedulerAppStatus(scheduler string, appName string) error {
 	return nil
 }
 
-// TriggerSchedulerCronWrite writes out cron entries for a given application
+// TriggerSchedulerCronWrite writes out cron tasks for a given application
 func TriggerSchedulerCronWrite(scheduler string, appName string) error {
 	if scheduler != "k3s" {
 		return nil
@@ -171,7 +171,7 @@ func TriggerSchedulerCronWrite(scheduler string, appName string) error {
 
 	cronTasks, err := cron.FetchCronTasks(cron.FetchCronTasksInput{AppName: appName})
 	if err != nil {
-		return fmt.Errorf("Error fetching cron entries: %w", err)
+		return fmt.Errorf("Error fetching cron tasks: %w", err)
 	}
 
 	ctx, cancel := context.WithCancel(context.Background())

From 66a30b0547338880f6c21d45cde9fbe1e85e307e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 20:58:56 -0400
Subject: [PATCH 096/427] refactor: rename cron entry to cron task

This naming better suits what it is we are fetching.
---
 plugins/scheduler-docker-local/functions.go | 4 ++--
 plugins/scheduler-docker-local/triggers.go  | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-docker-local/functions.go b/plugins/scheduler-docker-local/functions.go
index 977a8904c..4fc6a9a9c 100644
--- a/plugins/scheduler-docker-local/functions.go
+++ b/plugins/scheduler-docker-local/functions.go
@@ -116,7 +116,7 @@ func generateCronTasks() ([]cron.CronTask, error) {
 	return tasks, nil
 }
 
-func writeCronTasks(scheduler string) error {
+func writeCronTab(scheduler string) error {
 	// allow empty scheduler, which means all apps (used by letsencrypt)
 	if scheduler != "docker-local" && scheduler != "" {
 		return nil
@@ -154,7 +154,7 @@ func writeCronTasks(scheduler string) error {
 		return err
 	}
 
-	tmpFile, err := os.CreateTemp(os.TempDir(), fmt.Sprintf("dokku-%s-%s", common.MustGetEnv("DOKKU_PID"), "WriteCronTasks"))
+	tmpFile, err := os.CreateTemp(os.TempDir(), fmt.Sprintf("dokku-%s-%s", common.MustGetEnv("DOKKU_PID"), "WriteCronTab"))
 	if err != nil {
 		return fmt.Errorf("Cannot create temporary schedule file: %v", err)
 	}
diff --git a/plugins/scheduler-docker-local/triggers.go b/plugins/scheduler-docker-local/triggers.go
index 3bd78229d..321d2dc43 100644
--- a/plugins/scheduler-docker-local/triggers.go
+++ b/plugins/scheduler-docker-local/triggers.go
@@ -2,5 +2,5 @@ package schedulerdockerlocal
 
 // TriggerSchedulerCronWrite force updates the cron file for all apps
 func TriggerSchedulerCronWrite(scheduler string) error {
-	return writeCronTasks(scheduler)
+	return writeCronTab(scheduler)
 }

From 426e6b746a207e978a89394d04ee35d1ba6bf19b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 21:05:24 -0400
Subject: [PATCH 097/427] chore: standardize on cron task vs any other naming

---
 plugins/app-json/appjson.go | 2 +-
 plugins/cron/cron.go        | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index ab80fb21f..99c856bc5 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -55,7 +55,7 @@ type CronTask struct {
 	// Command is the command to execute
 	Command string `json:"command"`
 
-	// Maintenance is whether or not the cron command is in maintenance mode
+	// Maintenance is whether or not the cron task is in maintenance mode
 	Maintenance bool `json:"maintenance"`
 
 	// Schedule is the cron schedule to execute the command on
diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index de19d07b3..f21a058fa 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -56,10 +56,10 @@ type CronTask struct {
 	// AppInMaintenance is whether the app's cron is in maintenance mode
 	AppInMaintenance bool `json:"app-in-maintenance"`
 
-	// Maintenance is whether the cron command is in maintenance mode
+	// Maintenance is whether the cron task is in maintenance mode
 	TaskInMaintenance bool `json:"task-in-maintenance"`
 
-	// Maintenance is whether the cron command is in maintenance mode
+	// Maintenance is whether the cron task is in maintenance mode
 	Maintenance bool `json:"maintenance"`
 }
 

From 7461b839729ef294cb849e2dafb686c61234a38e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 7 Nov 2025 22:09:51 -0500
Subject: [PATCH 098/427] fix: use correct makefile target

---
 plugins/cron/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/cron/Makefile b/plugins/cron/Makefile
index 46513788c..93d8c9a0a 100644
--- a/plugins/cron/Makefile
+++ b/plugins/cron/Makefile
@@ -1,4 +1,4 @@
-SUBCOMMANDS = subcommands/list subcommands/report cron/resume subcommands/run subcommands/set subcommands/suspend
+SUBCOMMANDS = subcommands/list subcommands/report subcommands/resume subcommands/run subcommands/set subcommands/suspend
 TRIGGERS = triggers/app-json-is-valid triggers/cron-get-property triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-delete triggers/scheduler-stop
 BUILD = commands subcommands triggers
 PLUGIN_NAME = cron

From 00ce3932d060367462059f351cb4dc27a7c2771d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 8 Nov 2025 03:23:39 -0500
Subject: [PATCH 099/427] fix: update the json output

---
 tests/unit/cron.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index 77a22c2ea..09bb3b6b4 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -129,7 +129,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output '[{"id":"5cruaotm4yzzpnjlsdunblj8qyjp","command":"/bin/true","global":true,"schedule":"@daily","maintenance":false}]'
+  assert_output '[{"id":"5cruaotm4yzzpnjlsdunblj8qyjp","command":"/bin/true","global":true,"schedule":"@daily","app-in-maintenance":false,"task-in-maintenance":false,"maintenance":false}]'
 
   run /bin/bash -c "cat /var/spool/cron/crontabs/dokku"
   echo "output: $output"

From 2aea9993261f5ed9bdf444bfcef9ccd3f925350e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 9 Nov 2025 01:45:07 -0500
Subject: [PATCH 100/427] test: check if uninstalling after deleting apps will
 cause tests to work again

Not clear why they are suddenly failing, but lets switch this around for now.
---
 tests/unit/scheduler-k3s-2.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/scheduler-k3s-2.bats b/tests/unit/scheduler-k3s-2.bats
index 978bfa531..325c0c286 100644
--- a/tests/unit/scheduler-k3s-2.bats
+++ b/tests/unit/scheduler-k3s-2.bats
@@ -5,8 +5,8 @@ load test_helper
 TEST_APP="rdmtestapp"
 
 setup() {
-  uninstall_k3s || true
   global_setup
+  uninstall_k3s || true
   dokku nginx:stop
   export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
 }

From e30b579de5119654117cba8e09b2b58a10cfeafa Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 9 Nov 2025 01:51:57 -0500
Subject: [PATCH 101/427] test: fix issue where teardown was not being called

---
 tests/unit/scheduler-k3s-2.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/scheduler-k3s-2.bats b/tests/unit/scheduler-k3s-2.bats
index 325c0c286..978bfa531 100644
--- a/tests/unit/scheduler-k3s-2.bats
+++ b/tests/unit/scheduler-k3s-2.bats
@@ -5,8 +5,8 @@ load test_helper
 TEST_APP="rdmtestapp"
 
 setup() {
-  global_setup
   uninstall_k3s || true
+  global_setup
   dokku nginx:stop
   export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
 }

From d9603af08ad4b2e1fbe8483d3d02f4a5850acb51 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 01:55:44 -0500
Subject: [PATCH 102/427] docs: document cron task suspension

---
 docs/processes/scheduled-cron-tasks.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docs/processes/scheduled-cron-tasks.md b/docs/processes/scheduled-cron-tasks.md
index a8d39fdfc..39f659586 100644
--- a/docs/processes/scheduled-cron-tasks.md
+++ b/docs/processes/scheduled-cron-tasks.md
@@ -6,8 +6,10 @@
 ```
 cron:list <app> [--format json|stdout]  # List scheduled cron tasks for an app
 cron:report [<app>] [<flag>]            # Display report about an app
+cron:resume <app> <cron_id>             # Resume a cron task
 cron:run <app> <cron_id> [--detach]     # Run a cron task on the fly
 cron:set [--global|<app>] <key> <value> # Set or clear a cron property for an app
+cron:suspend <app> <cron_id>            # Suspend a cron task
 ```
 
 ## Usage
@@ -124,6 +126,26 @@ ID                            Schedule  Command
 5cruaotm4yzzpnjlsdunblj8qyjp  @daily    /bin/true
 ```
 
+#### Suspending and resuming a specific cron task
+
+Cron tasks can be suspended to temporarily prevent them from running, and later resumed to re-enable them. This is useful for maintenance or debugging purposes.
+
+To suspend a specific cron task, use the `cron:suspend` command with the app name and cron ID:
+
+```shell
+dokku cron:suspend node-js-app cGhwPT09cGhwIHRlc3QucGhwPT09QGRhaWx5
+```
+
+A suspended task will not execute according to its schedule. You can verify a task is suspended by checking the `Maintenance` column in the `cron:list` output, which will show `true (task)` for suspended tasks.
+
+To resume a suspended cron task, use the `cron:resume` command:
+
+```shell
+dokku cron:resume node-js-app cGhwPT09cGhwIHRlc3QucGhwPT09QGRhaWx5
+```
+
+Once resumed, the task will execute according to its schedule again. The cron ID can be retrieved from the `cron:list` output.
+
 #### Executing a cron task on the fly
 
 Cron tasks can be invoked via the `cron:run` command. This command takes an `app` argument and a `cron id` (retrievable from `cron:list` output).

From 4929272c870a1dd17c40ebf0be777a6bee068407 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 01:56:07 -0500
Subject: [PATCH 103/427] fix: calculate maintenance property correctly

---
 plugins/cron/cron.go | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index f21a058fa..1d02ade85 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -135,8 +135,9 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 			return tasks, fmt.Errorf("Invalid cron schedule for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
 		}
 
+		cronID := GenerateCommandID(appName, c)
 		maintenance := c.Maintenance
-		if value, ok := properties[MaintenancePropertyPrefix+c.Schedule]; ok {
+		if value, ok := properties[MaintenancePropertyPrefix+cronID]; ok {
 			boolValue, err := strconv.ParseBool(value)
 			if err != nil {
 				return tasks, fmt.Errorf("Invalid maintenance property for app %s (schedule %s): %s", appName, c.Schedule, err.Error())
@@ -152,7 +153,7 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 			App:               appName,
 			Command:           c.Command,
 			Schedule:          c.Schedule,
-			ID:                GenerateCommandID(appName, c),
+			ID:                cronID,
 			Maintenance:       isAppCronInMaintenance || maintenance,
 			AppInMaintenance:  isAppCronInMaintenance,
 			TaskInMaintenance: maintenance,

From 3638399726d1a30bbe2929d044de761c2a7b5666 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 01:56:59 -0500
Subject: [PATCH 104/427] fix: parse cronID correctly

---
 plugins/cron/subcommands.go | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index aef1b833e..233361953 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -159,12 +159,8 @@ func CommandSet(appName string, property string, value string) error {
 			return fmt.Errorf("Task maintenance properties cannot be set globally")
 		}
 
-		maintenanceParts := strings.SplitN(property, ".", 2)
-		if len(maintenanceParts) != 3 {
-			return fmt.Errorf("Invalid task maintenance property, expected format: %s$ID: %s", MaintenancePropertyPrefix, property)
-		}
-
-		if maintenanceParts[1] == "" {
+		cronTaskID := strings.TrimPrefix(property, MaintenancePropertyPrefix)
+		if cronTaskID == "" {
 			return fmt.Errorf("Invalid task maintenance property, missing ID")
 		}
 
@@ -173,9 +169,8 @@ func CommandSet(appName string, property string, value string) error {
 			return err
 		}
 
-		maintenanceID := maintenanceParts[1]
 		for _, task := range tasks {
-			if task.ID == maintenanceID {
+			if task.ID == cronTaskID {
 				validProperties[property] = ""
 				globalProperties[property] = false
 				break

From d49f9b89c28a601e20e3c5b8ad64fab835dd04f4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 01:57:12 -0500
Subject: [PATCH 105/427] chore: add commands to cron:help output

---
 plugins/cron/src/commands/commands.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/plugins/cron/src/commands/commands.go b/plugins/cron/src/commands/commands.go
index 36761c778..88ae2d1ee 100644
--- a/plugins/cron/src/commands/commands.go
+++ b/plugins/cron/src/commands/commands.go
@@ -20,8 +20,10 @@ Additional commands:`
 	helpContent = `
     cron:list <app> [--format json|stdout], List scheduled cron tasks for an app
     cron:report [<app>] [<flag>], Display report about an app
+    cron:resume <app> <cron_id>, Resume a cron task
     cron:run <app> <cron_id> [--detach], Run a cron task on the fly
-    cron:set [--global|<app>] <key> <value>, Set or clear a cron property for an app`
+    cron:set [--global|<app>] <key> <value>, Set or clear a cron property for an app
+    cron:suspend <app> <cron_id>, Suspend a cron task`
 )
 
 func main() {

From 379ada07d9b5a6cbc37a8a9ab71333dd7b04cdf1 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 01:57:46 -0500
Subject: [PATCH 106/427] fix: properly fetch non-maintenance tasks when
 building crontab file

---
 plugins/scheduler-docker-local/functions.go | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-docker-local/functions.go b/plugins/scheduler-docker-local/functions.go
index 4fc6a9a9c..b5ac3eecc 100644
--- a/plugins/scheduler-docker-local/functions.go
+++ b/plugins/scheduler-docker-local/functions.go
@@ -107,9 +107,10 @@ func generateCronTasks() ([]cron.CronTask, error) {
 	}
 
 	for result := range results {
-		c := result
-		if len(c) > 0 && !c[0].Maintenance {
-			tasks = append(tasks, c...)
+		for _, task := range result {
+			if !task.Maintenance {
+				tasks = append(tasks, task)
+			}
 		}
 	}
 

From 4cc2dc7844d770605c2547357917d37dc185d11f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 01:58:02 -0500
Subject: [PATCH 107/427] feat: add cron maintenance info to cron:report output

---
 plugins/cron/report.go | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/plugins/cron/report.go b/plugins/cron/report.go
index acf9760cb..6577b0a9a 100644
--- a/plugins/cron/report.go
+++ b/plugins/cron/report.go
@@ -1,7 +1,9 @@
 package cron
 
 import (
+	"fmt"
 	"strconv"
+	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
 )
@@ -21,6 +23,11 @@ func ReportSingleApp(appName string, format string, infoFlag string) error {
 		"--cron-maintenance":          reportMaintenance,
 	}
 
+	extraFlags := addCronMaintenanceFlags(appName, infoFlag)
+	for flag, fn := range extraFlags {
+		flags[flag] = fn
+	}
+
 	flagKeys := []string{}
 	for flagKey := range flags {
 		flagKeys = append(flagKeys, flagKey)
@@ -32,6 +39,24 @@ func ReportSingleApp(appName string, format string, infoFlag string) error {
 	return common.ReportSingleApp("cron", appName, infoFlag, infoFlags, flagKeys, format, trimPrefix, uppercaseFirstCharacter)
 }
 
+func addCronMaintenanceFlags(appName string, infoFlag string) map[string]common.ReportFunc {
+	flags := map[string]common.ReportFunc{}
+
+	properties, err := common.PropertyGetAllByPrefix("cron", appName, MaintenancePropertyPrefix)
+	if err != nil {
+		return flags
+	}
+
+	for property, value := range properties {
+		key := strings.Replace(property, MaintenancePropertyPrefix, "", 1)
+		flags[fmt.Sprintf("--cron-maintenance-%s", key)] = func(appName string) string {
+			return value
+		}
+	}
+
+	return flags
+}
+
 func reportMailfrom(_ string) string {
 	return common.PropertyGet("cron", "--global", "mailfrom")
 }

From 8ba6ce94fce678f97b7ee6868d5cfb00fd62c642 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 02:00:14 -0500
Subject: [PATCH 108/427] test: add tests for cron suspend and resume commands

---
 tests/unit/cron.bats | 68 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 68 insertions(+)

diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index 09bb3b6b4..5c0b1345d 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -235,6 +235,74 @@ teardown() {
   assert_output "['task.py', 'schedule', 'now']"
 }
 
+@test "(cron) cron:suspend cron:resume" {
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP template_cron_file_valid_multiple
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "cat /var/spool/cron/crontabs/dokku"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "python3 task.py first"
+  assert_output_contains "python3 task.py second"
+
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  first_command="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].command')"
+  run /bin/bash -c "echo $first_command"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:report $TEST_APP --cron-maintenance-$cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+
+  run /bin/bash -c "dokku cron:suspend $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku cron:report $TEST_APP --cron-maintenance-$cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "true"
+
+  run /bin/bash -c "cat /var/spool/cron/crontabs/dokku"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "python3 task.py first" 0
+  assert_output_contains "python3 task.py second"
+
+  run /bin/bash -c "dokku cron:resume $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku cron:report $TEST_APP --cron-maintenance-$cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+
+  run /bin/bash -c "cat /var/spool/cron/crontabs/dokku"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "python3 task.py first"
+  assert_output_contains "python3 task.py second"
+}
+
 template_cron_file_invalid() {
   local APP="$1"
   local APP_REPO_DIR="$2"

From d72c183d9e4cfa60e20656960ee5c007502d4f21 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 18:00:07 -0400
Subject: [PATCH 109/427] feat: add ability to specify a concurrency policy for
 crons in the app.json file

---
 docs/appendices/file-formats/app-json.md | 1 +
 plugins/app-json/appjson.go              | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/docs/appendices/file-formats/app-json.md b/docs/appendices/file-formats/app-json.md
index c7500e19f..842674376 100644
--- a/docs/appendices/file-formats/app-json.md
+++ b/docs/appendices/file-formats/app-json.md
@@ -23,6 +23,7 @@
 - `command`: (string, required)
 - `maintenance`: (boolean, optional)
 - `schedule`: (string, required)
+- `concurrency_policy`: (string, optional, default: `allow`, options: `allow`, `deny`, `replace`)
 
 ## Formation
 
diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index 99c856bc5..fe59c9942 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -60,6 +60,9 @@ type CronTask struct {
 
 	// Schedule is the cron schedule to execute the command on
 	Schedule string `json:"schedule"`
+
+	// ConcurrencyPolicy is the concurrency policy for the cron command
+	ConcurrencyPolicy string `json:"concurrency_policy"`
 }
 
 // Formation is a struct that represents the scale for a process from an app.json file

From f1e3c0764c1e7bb25b61b2d6ed574da2b5399afe Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 18:06:21 -0400
Subject: [PATCH 110/427] feat: expose the concurrency policy when fetching
 cron entries

Also add some validation to ensure invalid values are not specified.
---
 plugins/cron/cron.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index 1d02ade85..aa62ed75c 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -47,6 +47,9 @@ type CronTask struct {
 	// Schedule is the cron schedule
 	Schedule string `json:"schedule"`
 
+	// ConcurrencyPolicy is the concurrency policy for the cron command
+	ConcurrencyPolicy string `json:"concurrency_policy"`
+
 	// AltCommand is an alternate command to run
 	AltCommand string `json:"-"`
 
@@ -148,12 +151,19 @@ func FetchCronTasks(input FetchCronTasksInput) ([]CronTask, error) {
 				maintenance = boolValue
 			}
 		}
+		if c.ConcurrencyPolicy == "" {
+			c.ConcurrencyPolicy = "allow"
+		}
+		if c.ConcurrencyPolicy != "allow" && c.ConcurrencyPolicy != "forbid" && c.ConcurrencyPolicy != "replace" {
+			return tasks, fmt.Errorf("Invalid cron concurrency policy for app %s (schedule %s): %s", appName, c.Schedule, c.ConcurrencyPolicy)
+		}
 
 		tasks = append(tasks, CronTask{
 			App:               appName,
 			Command:           c.Command,
 			Schedule:          c.Schedule,
 			ID:                cronID,
+			ConcurrencyPolicy: c.ConcurrencyPolicy,
 			Maintenance:       isAppCronInMaintenance || maintenance,
 			AppInMaintenance:  isAppCronInMaintenance,
 			TaskInMaintenance: maintenance,

From f38bc641194ab67b22da077502a95bcae66418cf Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 18:12:25 -0400
Subject: [PATCH 111/427] feat: expose concurrency policy to kubernetes jobs

---
 plugins/scheduler-k3s/template.go               | 17 +++++++++++++----
 .../scheduler-k3s/templates/chart/cron-job.yaml |  2 +-
 plugins/scheduler-k3s/triggers.go               | 10 ++++++----
 3 files changed, 20 insertions(+), 9 deletions(-)

diff --git a/plugins/scheduler-k3s/template.go b/plugins/scheduler-k3s/template.go
index 17eafdde5..dcc6060d8 100644
--- a/plugins/scheduler-k3s/template.go
+++ b/plugins/scheduler-k3s/template.go
@@ -299,12 +299,21 @@ const (
 )
 
 type ProcessCron struct {
-	ID       string `yaml:"id"`
-	Schedule string `yaml:"schedule"`
-	Suffix   string `yaml:"suffix"`
-	Suspend  bool   `yaml:"suspend"`
+	ID                string                       `yaml:"id"`
+	Schedule          string                       `yaml:"schedule"`
+	Suffix            string                       `yaml:"suffix"`
+	Suspend           bool                         `yaml:"suspend"`
+	ConcurrencyPolicy ProcessCronConcurrencyPolicy `yaml:"concurrency_policy"`
 }
 
+type ProcessCronConcurrencyPolicy string
+
+const (
+	ProcessCronConcurrencyPolicy_Allow   ProcessCronConcurrencyPolicy = "Allow"
+	ProcessCronConcurrencyPolicy_Forbid  ProcessCronConcurrencyPolicy = "Forbid"
+	ProcessCronConcurrencyPolicy_Replace ProcessCronConcurrencyPolicy = "Replace"
+)
+
 type ProcessPortMap struct {
 	ContainerPort int32           `yaml:"container_port"`
 	HostPort      int32           `yaml:"host_port"`
diff --git a/plugins/scheduler-k3s/templates/chart/cron-job.yaml b/plugins/scheduler-k3s/templates/chart/cron-job.yaml
index b5b4e8b88..102b3ce1e 100644
--- a/plugins/scheduler-k3s/templates/chart/cron-job.yaml
+++ b/plugins/scheduler-k3s/templates/chart/cron-job.yaml
@@ -26,7 +26,7 @@ metadata:
   name: {{ $.Values.global.app_name }}-cron-{{ $config.cron.suffix }}
   namespace: {{ $.Values.global.namespace }}
 spec:
-  concurrencyPolicy: Allow
+  concurrencyPolicy: {{ $config.cron.concurrency_policy }}
   failedJobsHistoryLimit: 10
   jobTemplate:
     metadata:
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 626f11a5d..1086a7163 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -699,14 +699,16 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 			return fmt.Errorf("Error getting process labels: %w", err)
 		}
 
+		concurrencyPolicy := strings.ToUpper(cronTask.ConcurrencyPolicy)
 		processValues := ProcessValues{
 			Args:        words,
 			Annotations: annotations,
 			Cron: ProcessCron{
-				ID:       cronTask.ID,
-				Schedule: cronTask.Schedule,
-				Suffix:   suffix,
-				Suspend:  cronTask.Maintenance,
+				ID:                cronTask.ID,
+				Schedule:          cronTask.Schedule,
+				Suffix:            suffix,
+				Suspend:           cronTask.Maintenance,
+				ConcurrencyPolicy: ProcessCronConcurrencyPolicy(concurrencyPolicy),
 			},
 			Labels:      labels,
 			ProcessType: ProcessType_Cron,

From 20be426125d1aa1f52a276177565a98a2eba0929 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Sep 2025 19:10:01 -0400
Subject: [PATCH 112/427] feat: add support for locking in docker-local
 commands

---
 plugins/cron/cron.go                         |  2 +-
 plugins/run/internal-functions               | 17 ++++++++-
 plugins/scheduler-docker-local/scheduler-run | 39 ++++++++++++++++++++
 3 files changed, 55 insertions(+), 3 deletions(-)

diff --git a/plugins/cron/cron.go b/plugins/cron/cron.go
index aa62ed75c..89d19f552 100644
--- a/plugins/cron/cron.go
+++ b/plugins/cron/cron.go
@@ -75,7 +75,7 @@ func (t CronTask) DokkuRunCommand() string {
 		return t.AltCommand
 	}
 
-	return fmt.Sprintf("dokku run --cron-id %s %s %s", t.ID, t.App, t.Command)
+	return fmt.Sprintf("dokku run --concurrency-policy %s --cron-id %s %s %s", t.ConcurrencyPolicy, t.ID, t.App, t.Command)
 }
 
 // FetchCronTasksInput is the input for the FetchCronTasks function
diff --git a/plugins/run/internal-functions b/plugins/run/internal-functions
index b4ccfc2ce..fe45b1790 100755
--- a/plugins/run/internal-functions
+++ b/plugins/run/internal-functions
@@ -9,7 +9,7 @@ fn-run() {
   shift 1
 
   declare APP=""
-  local CRON_ID
+  local CRON_ID CONCURRENCY_POLICY="allow"
   declare -a RUN_ENV
   RUN_ENV=()
   while [[ $# -gt 0 ]]; do
@@ -19,6 +19,11 @@ fn-run() {
         CRON_ID="$arg"
         shift
         ;;
+      --concurrency-policy=*)
+        local arg=$(printf "%s" "$1" | sed -E 's/(^--concurrency-policy=)//g')
+        CONCURRENCY_POLICY="$arg"
+        shift
+        ;;
       --no-tty)
         export DOKKU_DISABLE_TTY=true
         shift
@@ -35,6 +40,14 @@ fn-run() {
         CRON_ID="$2"
         shift 2
         ;;
+      --concurrency-policy)
+        if [[ ! $2 ]]; then
+          dokku_log_warn "expected $1 to have an argument"
+          break
+        fi
+        CONCURRENCY_POLICY="$2"
+        shift 2
+        ;;
       -e=* | --env=*)
         local arg=$(printf "%s" "$1" | sed -E 's/(^-e=)|(^--env=)//g')
         RUN_ENV+=("$arg")
@@ -67,7 +80,7 @@ fn-run() {
   verify_app_name "$APP"
 
   local DOKKU_SCHEDULER=$(get_app_scheduler "$APP")
-  DOKKU_CRON_ID="$CRON_ID" plugn trigger scheduler-run "$DOKKU_SCHEDULER" "$APP" "${#RUN_ENV[@]}" "${RUN_ENV[@]}" -- "$@"
+  DOKKU_CRON_ID="$CRON_ID" DOKKU_CONCURRENCY_POLICY="$CONCURRENCY_POLICY" plugn trigger scheduler-run "$DOKKU_SCHEDULER" "$APP" "${#RUN_ENV[@]}" "${RUN_ENV[@]}" -- "$@"
 }
 
 cmd-run() {
diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index cb6bbfb74..096210dc3 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -5,6 +5,25 @@ source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
 source "$PLUGIN_AVAILABLE_PATH/config/functions"
 source "$PLUGIN_AVAILABLE_PATH/scheduler-docker-local/internal-functions"
 
+fn-scheduler-docker-local-scheduler-run-acquire-lock() {
+  declare desc="acquire advisory lock for use in docker-local cron jobs"
+  local APP="$1" CRON_ID="$2"
+  local LOCK_TYPE="exclusive"
+  local APP_DEPLOY_LOCK_FILE="$DOKKU_LIB_ROOT/data/scheduler-docker-local/$APP/cron-$CRON_ID.lock"
+  local LOCK_WAITING_MSG="$APP currently has a cron lock in place for $CRON_ID. Waiting..."
+  local LOCK_FAILED_MSG="$APP currently has a cron lock in place for $CRON_ID. Exiting..."
+
+  acquire_advisory_lock "$APP_DEPLOY_LOCK_FILE" "$LOCK_TYPE" "$LOCK_WAITING_MSG" "$LOCK_FAILED_MSG"
+}
+
+fn-scheduler-docker-local-scheduler-run-release-lock() {
+  declare desc="release advisory lock used in docker-local cron jobs"
+  local APP="$1" CRON_ID="$2"
+  local APP_DEPLOY_LOCK_FILE="$DOKKU_LIB_ROOT/data/scheduler-docker-local/$APP/cron-$CRON_ID.lock"
+
+  release_advisory_lock "$APP_DEPLOY_LOCK_FILE"
+}
+
 trigger-scheduler-docker-local-scheduler-run() {
   declare desc="runs command in container based on app image"
   declare trigger="scheduler-run"
@@ -39,9 +58,24 @@ trigger-scheduler-docker-local-scheduler-run() {
   [[ "$DOKKU_TRACE" ]] && DOCKER_ARGS+=" -e TRACE=true "
 
   local PROCESS_TYPE=run
+  local concurrency_policy="allow"
   if [[ -n "$DOKKU_CRON_ID" ]]; then
     PROCESS_TYPE=cron
     DOCKER_ARGS+=" --label=com.dokku.cron-id=$DOKKU_CRON_ID"
+
+    if [[ -n "$DOKKU_CONCURRENCY_POLICY" ]]; then
+      concurrency_policy="$DOKKU_CONCURRENCY_POLICY"
+    fi
+    concurrency_policy="$DOKKU_CONCURRENCY_POLICY"
+    DOCKER_ARGS+=" --label=com.dokku.concurrency-policy=$concurrency_policy"
+
+    if [[ "$concurrency_policy" == "forbid" ]]; then
+      fn-scheduler-docker-local-scheduler-run-acquire-lock "$APP" "$DOKKU_CRON_ID"
+    fi
+
+    if [[ "$concurrency_policy" == "replace" ]]; then
+      dokku_log_warn "Concurrency policy 'replace' is not supported for docker-local cron jobs"
+    fi
   fi
 
   local DYNO_NUMBER="$RANDOM"
@@ -138,6 +172,11 @@ trigger-scheduler-docker-local-scheduler-run() {
     DOKKU_CONTAINER_EXIT_CODE="$("$DOCKER_BIN" container wait "$CONTAINER_ID" 2>/dev/null || echo "$EXIT_CODE")"
     [[ -z "$DOKKU_CONTAINER_EXIT_CODE" ]] && DOKKU_CONTAINER_EXIT_CODE=0
   fi
+
+  if [[ -n "$DOKKU_CRON_ID" ]] && [[ "$concurrency_policy" == "forbid" ]]; then
+    fn-scheduler-docker-local-scheduler-run-release-lock "$APP" "$DOKKU_CRON_ID"
+  fi
+
   plugn trigger scheduler-post-run "$DOKKU_SCHEDULER" "$APP" "$CONTAINER_ID" "$DOKKU_CONTAINER_EXIT_CODE"
   return "$DOKKU_CONTAINER_EXIT_CODE"
 }

From b8f32f6ea42d9b71dba53e1dce32563976f19e8e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 5 Oct 2025 15:45:47 -0400
Subject: [PATCH 113/427] tests: add concurrency_policy to test check

---
 tests/unit/cron.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index 5c0b1345d..671e8f58f 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -129,7 +129,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output '[{"id":"5cruaotm4yzzpnjlsdunblj8qyjp","command":"/bin/true","global":true,"schedule":"@daily","app-in-maintenance":false,"task-in-maintenance":false,"maintenance":false}]'
+  assert_output '[{"id":"5cruaotm4yzzpnjlsdunblj8qyjp","command":"/bin/true","global":true,"schedule":"@daily","concurrency_policy":"","app-in-maintenance":false,"task-in-maintenance":false,"maintenance":false}]'
 
   run /bin/bash -c "cat /var/spool/cron/crontabs/dokku"
   echo "output: $output"

From 983115c8277979b7045aefa74b122369f57e914c Mon Sep 17 00:00:00 2001
From: Corey Taylor <corey.taylor.fl@gmail.com>
Date: Tue, 21 Oct 2025 21:44:11 -0500
Subject: [PATCH 114/427] Add test for cron concurrency policy

---
 docs/appendices/file-formats/app-json.md     |  2 +-
 plugins/cron/subcommands.go                  |  4 +-
 plugins/scheduler-docker-local/scheduler-run |  1 -
 tests/unit/cron.bats                         | 42 ++++++++++++++++++++
 4 files changed, 45 insertions(+), 4 deletions(-)

diff --git a/docs/appendices/file-formats/app-json.md b/docs/appendices/file-formats/app-json.md
index 842674376..b3cd72c7b 100644
--- a/docs/appendices/file-formats/app-json.md
+++ b/docs/appendices/file-formats/app-json.md
@@ -23,7 +23,7 @@
 - `command`: (string, required)
 - `maintenance`: (boolean, optional)
 - `schedule`: (string, required)
-- `concurrency_policy`: (string, optional, default: `allow`, options: `allow`, `deny`, `replace`)
+- `concurrency_policy`: (string, optional, default: `allow`, options: `allow`, `forbid`, `replace`)
 
 ## Formation
 
diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index 233361953..c47fa3289 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -42,7 +42,7 @@ func CommandList(appName string, format string) error {
 	}
 
 	if format == "stdout" {
-		output := []string{"ID | Schedule | Maintenance | Command"}
+		output := []string{"ID | Schedule | Concurrency | Maintenance | Command"}
 		for _, task := range tasks {
 			maintenance := "false"
 			if task.Maintenance {
@@ -52,7 +52,7 @@ func CommandList(appName string, format string) error {
 					maintenance = "true (app)"
 				}
 			}
-			output = append(output, fmt.Sprintf("%s | %s | %s | %s", task.ID, task.Schedule, maintenance, task.Command))
+			output = append(output, fmt.Sprintf("%s | %s | %s | %t | %s", task.ID, task.Schedule, task.ConcurrencyPolicy, maintenance, task.Command))
 		}
 
 		result := columnize.SimpleFormat(output)
diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index 096210dc3..0df116077 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -66,7 +66,6 @@ trigger-scheduler-docker-local-scheduler-run() {
     if [[ -n "$DOKKU_CONCURRENCY_POLICY" ]]; then
       concurrency_policy="$DOKKU_CONCURRENCY_POLICY"
     fi
-    concurrency_policy="$DOKKU_CONCURRENCY_POLICY"
     DOCKER_ARGS+=" --label=com.dokku.concurrency-policy=$concurrency_policy"
 
     if [[ "$concurrency_policy" == "forbid" ]]; then
diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index 671e8f58f..fa5d8a0e4 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -235,6 +235,30 @@ teardown() {
   assert_output "['task.py', 'schedule', 'now']"
 }
 
+@test "(cron) cron:run concurrency_policy forbid" {
+  run deploy_app dockerfile dokku@$DOKKU_DOMAIN:$TEST_APP template_cron_file_concurrency_forbid
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo cron $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id --detach"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+}
+
 @test "(cron) cron:suspend cron:resume" {
   run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP template_cron_file_valid_multiple
   echo "output: $output"
@@ -427,3 +451,21 @@ template_cron_file_valid_multiple() {
 }
 EOF
 }
+
+template_cron_file_concurrency_forbid() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+  echo "injecting valid cron app.json -> $APP_REPO_DIR/app.json"
+  cat <<EOF >"$APP_REPO_DIR/app.json"
+{
+  "cron": [
+    {
+      "command": "sleep 5",
+      "schedule": "0 0 * * *",
+      "concurrency_policy": "forbid"
+    }
+  ]
+}
+EOF
+}

From c95cb526bed17b45c71a16a6d4db345c4d864054 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 27 Oct 2025 14:28:18 -0400
Subject: [PATCH 115/427] fix: correct lint issue

---
 tests/unit/cron.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index fa5d8a0e4..6da29182d 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -240,7 +240,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  
+
   cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
   run /bin/bash -c "echo cron $cron_id"
   echo "output: $output"

From 8c2731b328683a7492a4aefbeab7a90679d97064 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 27 Oct 2025 14:37:13 -0400
Subject: [PATCH 116/427] fix: properly set concurrency policy for golang

---
 plugins/scheduler-k3s/triggers.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 1086a7163..7ae406ee4 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -700,6 +700,16 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 		}
 
 		concurrencyPolicy := strings.ToUpper(cronTask.ConcurrencyPolicy)
+		switch concurrencyPolicy {
+		case "ALLOW":
+			concurrencyPolicy = "Allow"
+		case "FORBID":
+			concurrencyPolicy = "Forbid"
+		case "REPLACE":
+			concurrencyPolicy = "Replace"
+		default:
+			return fmt.Errorf("Invalid concurrency_policy specified: %v", concurrencyPolicy)
+		}
 		processValues := ProcessValues{
 			Args:        words,
 			Annotations: annotations,

From 3162fa5b9a64f342c95aa11f39da477d345eed94 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 10 Nov 2025 18:02:46 -0500
Subject: [PATCH 117/427] debug: run sleep for longer and check the inspect
 output of the cron container

---
 tests/unit/cron.bats | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index 6da29182d..8b37cac2c 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -253,6 +253,12 @@ teardown() {
   echo "status: $status"
   assert_success
 
+  run /bin/bash -c "docker ps --filter "label=com.dokku.cron-id=$cron_id" -q | xargs docker inspect"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
   run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
   echo "output: $output"
   echo "status: $status"
@@ -461,7 +467,7 @@ template_cron_file_concurrency_forbid() {
 {
   "cron": [
     {
-      "command": "sleep 5",
+      "command": "sleep 30",
       "schedule": "0 0 * * *",
       "concurrency_policy": "forbid"
     }

From eb82d958f4e5facb574062bfeefc8fbbffa98f82 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Nov 2025 13:07:05 +0000
Subject: [PATCH 118/427] chore(deps): bump mkdocs-material from 9.6.23 to
 9.7.0 in /docs/_build

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.6.23 to 9.7.0.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.23...9.7.0)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index b71a1f74b..30831f7c4 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -8,7 +8,7 @@ MarkupSafe==3.0.3
 mergedeep==1.3.4
 mkdocs==1.6.1
 mkdocs-exclude==1.0.2
-mkdocs-material==9.6.23
+mkdocs-material==9.7.0
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2

From 679a399df33a365990698db56a212c2b4cfd7295 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 12 Nov 2025 13:07:30 +0000
Subject: [PATCH 119/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.16.1 to 10.17.1.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.16.1...10.17.1)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 10.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index b71a1f74b..66f54ad75 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.6.23
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
-pymdown-extensions==10.16.1
+pymdown-extensions==10.17.1
 pyparsing==3.2.5
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From c56110b3a72ad600c421af701c3c17ff4938108f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 13 Nov 2025 01:52:08 -0500
Subject: [PATCH 120/427] fix: do not print errors twice

---
 plugins/common/log.go       | 4 +++-
 plugins/cron/subcommands.go | 5 +++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/plugins/common/log.go b/plugins/common/log.go
index 9a3281138..9e67287b4 100644
--- a/plugins/common/log.go
+++ b/plugins/common/log.go
@@ -90,7 +90,9 @@ func LogFailWithError(err error) {
 			fmt.Fprintf(os.Stderr, " !     %s\n", e.Error())
 		}
 	} else {
-		fmt.Fprintf(os.Stderr, " !     %s\n", err.Error())
+		if err.Error() != "" {
+			fmt.Fprintf(os.Stderr, " !     %s\n", err.Error())
+		}
 	}
 	if errExit, ok := err.(ErrWithExitCode); ok {
 		os.Exit(errExit.ExitCode())
diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index c47fa3289..c46ba4771 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -143,6 +143,11 @@ func CommandRun(appName string, cronID string, detached bool) error {
 		Args:        args,
 		StreamStdio: true,
 	})
+	if err != nil {
+		// return an error with an empty message to avoid
+		// printing the error message twice
+		return errors.New("")
+	}
 	return err
 }
 

From 3f8c868ab856eeee82c1e9d433694e3f205c45cb Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 13 Nov 2025 01:53:33 -0500
Subject: [PATCH 121/427] fix: ensure the concurrency policy is propagated when
 running a cron command directly

---
 plugins/cron/subcommands.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/plugins/cron/subcommands.go b/plugins/cron/subcommands.go
index c46ba4771..8bc86677f 100644
--- a/plugins/cron/subcommands.go
+++ b/plugins/cron/subcommands.go
@@ -112,9 +112,11 @@ func CommandRun(appName string, cronID string, detached bool) error {
 	}
 
 	command := ""
+	concurrencyPolicy := "allow"
 	for _, task := range tasks {
 		if task.ID == cronID {
 			command = task.Command
+			concurrencyPolicy = task.ConcurrencyPolicy
 		}
 	}
 
@@ -134,6 +136,7 @@ func CommandRun(appName string, cronID string, detached bool) error {
 		os.Setenv("DOKKU_DISABLE_TTY", "true")
 	}
 
+	os.Setenv("DOKKU_CONCURRENCY_POLICY", concurrencyPolicy)
 	os.Setenv("DOKKU_CRON_ID", cronID)
 	os.Setenv("DOKKU_RM_CONTAINER", "1")
 	scheduler := common.GetAppScheduler(appName)

From bacbc6d90d4c2055235f5a4e2fbaef3ab0de22b2 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 13 Nov 2025 01:54:47 -0500
Subject: [PATCH 122/427] fix: correctly check for running containers when
 concurrency policy is forbid

We cannot grab a lock as cron:run with --detach will release the lock. Instead, just check if any containers for the specified cron_id are running and exit.
---
 plugins/scheduler-docker-local/scheduler-run | 30 ++++----------------
 1 file changed, 6 insertions(+), 24 deletions(-)

diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index 0df116077..3ff3077b6 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -5,25 +5,6 @@ source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
 source "$PLUGIN_AVAILABLE_PATH/config/functions"
 source "$PLUGIN_AVAILABLE_PATH/scheduler-docker-local/internal-functions"
 
-fn-scheduler-docker-local-scheduler-run-acquire-lock() {
-  declare desc="acquire advisory lock for use in docker-local cron jobs"
-  local APP="$1" CRON_ID="$2"
-  local LOCK_TYPE="exclusive"
-  local APP_DEPLOY_LOCK_FILE="$DOKKU_LIB_ROOT/data/scheduler-docker-local/$APP/cron-$CRON_ID.lock"
-  local LOCK_WAITING_MSG="$APP currently has a cron lock in place for $CRON_ID. Waiting..."
-  local LOCK_FAILED_MSG="$APP currently has a cron lock in place for $CRON_ID. Exiting..."
-
-  acquire_advisory_lock "$APP_DEPLOY_LOCK_FILE" "$LOCK_TYPE" "$LOCK_WAITING_MSG" "$LOCK_FAILED_MSG"
-}
-
-fn-scheduler-docker-local-scheduler-run-release-lock() {
-  declare desc="release advisory lock used in docker-local cron jobs"
-  local APP="$1" CRON_ID="$2"
-  local APP_DEPLOY_LOCK_FILE="$DOKKU_LIB_ROOT/data/scheduler-docker-local/$APP/cron-$CRON_ID.lock"
-
-  release_advisory_lock "$APP_DEPLOY_LOCK_FILE"
-}
-
 trigger-scheduler-docker-local-scheduler-run() {
   declare desc="runs command in container based on app image"
   declare trigger="scheduler-run"
@@ -69,7 +50,12 @@ trigger-scheduler-docker-local-scheduler-run() {
     DOCKER_ARGS+=" --label=com.dokku.concurrency-policy=$concurrency_policy"
 
     if [[ "$concurrency_policy" == "forbid" ]]; then
-      fn-scheduler-docker-local-scheduler-run-acquire-lock "$APP" "$DOKKU_CRON_ID"
+      # check if there is a running docker container with the same com.dokku.cron-id label
+      local RUNNING_CONTAINERS="$("$DOCKER_BIN" container ls --filter "label=com.dokku.cron-id=$DOKKU_CRON_ID" --filter "status=running" --quiet || true)"
+      if [[ -n "$RUNNING_CONTAINERS" ]]; then
+        dokku_log_warn "$APP currently has a cron lock in place for $DOKKU_CRON_ID. Exiting..."
+        return 1
+      fi
     fi
 
     if [[ "$concurrency_policy" == "replace" ]]; then
@@ -172,10 +158,6 @@ trigger-scheduler-docker-local-scheduler-run() {
     [[ -z "$DOKKU_CONTAINER_EXIT_CODE" ]] && DOKKU_CONTAINER_EXIT_CODE=0
   fi
 
-  if [[ -n "$DOKKU_CRON_ID" ]] && [[ "$concurrency_policy" == "forbid" ]]; then
-    fn-scheduler-docker-local-scheduler-run-release-lock "$APP" "$DOKKU_CRON_ID"
-  fi
-
   plugn trigger scheduler-post-run "$DOKKU_SCHEDULER" "$APP" "$CONTAINER_ID" "$DOKKU_CONTAINER_EXIT_CODE"
   return "$DOKKU_CONTAINER_EXIT_CODE"
 }

From 42a92eb6549f4ee5d6520fb6a3f3a8c6e7b2e86d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 13 Nov 2025 01:55:12 -0500
Subject: [PATCH 123/427] feat: add support for replace concurrency policy

---
 plugins/scheduler-docker-local/scheduler-run | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index 3ff3077b6..b83510684 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -59,7 +59,13 @@ trigger-scheduler-docker-local-scheduler-run() {
     fi
 
     if [[ "$concurrency_policy" == "replace" ]]; then
-      dokku_log_warn "Concurrency policy 'replace' is not supported for docker-local cron jobs"
+      local RUNNING_CONTAINERS="$("$DOCKER_BIN" container ls --filter "label=com.dokku.cron-id=$DOKKU_CRON_ID" --filter "status=running" --quiet || true)"
+      if [[ -n "$RUNNING_CONTAINERS" ]]; then
+        dokku_log_warn "Replacing running container for $DOKKU_CRON_ID"
+        "$DOCKER_BIN" container update --restart=no "$RUNNING_CONTAINERS" &>/dev/null || true
+        "$DOCKER_BIN" container stop "$RUNNING_CONTAINERS" >/dev/null && "$DOCKER_BIN" container kill "$RUNNING_CONTAINERS" &>/dev/null
+        plugn trigger scheduler-register-retired "$APP" "$RUNNING_CONTAINERS"
+      fi
     fi
   fi
 

From c6bd80aca68169555d412f37086d678ba4b67e5c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 13 Nov 2025 01:55:32 -0500
Subject: [PATCH 124/427] tests: update tests

---
 tests/unit/cron.bats | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/tests/unit/cron.bats b/tests/unit/cron.bats
index 8b37cac2c..5eb2bc34a 100644
--- a/tests/unit/cron.bats
+++ b/tests/unit/cron.bats
@@ -253,15 +253,16 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "docker ps --filter "label=com.dokku.cron-id=$cron_id" -q | xargs docker inspect"
+  run /bin/bash -c "docker ps --filter "label=com.dokku.cron-id=$cron_id" -q | xargs docker inspect -f '{{ index .Config.Labels \"com.dokku.concurrency-policy\" }}'"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_exists
+  assert_output "forbid"
 
   run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
   echo "output: $output"
   echo "status: $status"
+  assert_output_contains "currently has a cron lock in place for $cron_id"
   assert_failure
 }
 

From dc8424d8a52b911c4d87746cb90a13286a7ebd24 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 13 Nov 2025 01:58:37 -0500
Subject: [PATCH 125/427] docs: document the concurrency_policy

---
 docs/processes/scheduled-cron-tasks.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/processes/scheduled-cron-tasks.md b/docs/processes/scheduled-cron-tasks.md
index 39f659586..6ce3b5f71 100644
--- a/docs/processes/scheduled-cron-tasks.md
+++ b/docs/processes/scheduled-cron-tasks.md
@@ -38,6 +38,8 @@ A cron task takes the following properties:
 - `command`: A command to be run within the built app image. Specified commands can also be `Procfile` entries.
 - `maintenance`: A boolean value that decides whether the cron task is in maintenance and therefore executable or not.
 - `schedule`: A [cron-compatible](https://en.wikipedia.org/wiki/Cron#Overview) scheduling definition upon which to run the command. Seconds are generally not supported.
+- `concurrency_policy`: A string (default: `allow`), that controls whether the cron task can be run concurrently with another invocation of itself. Valid options are `allow` (allow concurrency), `forbid` (exit the new cron task if there is an existing one), `replace` (delete any existing cron task and start the new one).
+
 
 Zero or more cron tasks can be specified per app. Cron tasks are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
 

From d5b886b2b58706fd11c71b2e0da02a73d474a5d9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Nov 2025 13:09:58 +0000
Subject: [PATCH 126/427] chore(deps): bump timberio/vector in /plugins/logs

Bumps timberio/vector from 0.51.0-debian to 0.51.1-debian.

---
updated-dependencies:
- dependency-name: timberio/vector
  dependency-version: 0.51.1-debian
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/logs/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/logs/Dockerfile b/plugins/logs/Dockerfile
index 35920604a..a5780abbb 100644
--- a/plugins/logs/Dockerfile
+++ b/plugins/logs/Dockerfile
@@ -1 +1 @@
-FROM timberio/vector:0.51.0-debian
+FROM timberio/vector:0.51.1-debian

From ebfcf24e53f2fce79e93a5b52c68ba5951082a26 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Nov 2025 13:10:02 +0000
Subject: [PATCH 127/427] chore(deps): bump traefik from 3.5.4 to 3.6.1 in
 /plugins/traefik-vhosts

Bumps traefik from 3.5.4 to 3.6.1.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index 573541f50..199aa0ee8 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.5.4
+FROM traefik:3.6.1

From 00411decf57745023c73bf4491a7bf3f1e5b5d21 Mon Sep 17 00:00:00 2001
From: Corey Taylor <corey.taylor.fl@gmail.com>
Date: Sat, 15 Nov 2025 02:04:43 -0600
Subject: [PATCH 128/427] Add process-type label for run with procfile cmd

---
 plugins/scheduler-docker-local/scheduler-run | 1 +
 1 file changed, 1 insertion(+)

diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index cb6bbfb74..286598c07 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -83,6 +83,7 @@ trigger-scheduler-docker-local-scheduler-run() {
 
     if [[ -n "$PROC_CMD" ]]; then
       dokku_log_info1_quiet "Found '$POTENTIAL_PROCFILE_KEY' in Procfile, running that command"
+      DOCKER_ARGS+=" --label=com.dokku.process-type=$POTENTIAL_PROCFILE_KEY"
       set -- "$PROC_CMD" "${@:2}"
     fi
   fi

From 3f707284515088b77ee34bf7cff7afb8510ebe4c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 16:19:15 -0500
Subject: [PATCH 129/427] feat: implement forbid/replace logic for k3s pods
 spawned via cron:run

---
 plugins/scheduler-k3s/k8s.go      | 45 +++++++++++++++++++++++++++++++
 plugins/scheduler-k3s/triggers.go | 44 +++++++++++++++++++++++-------
 2 files changed, 79 insertions(+), 10 deletions(-)

diff --git a/plugins/scheduler-k3s/k8s.go b/plugins/scheduler-k3s/k8s.go
index aa5a07543..14ee6002b 100644
--- a/plugins/scheduler-k3s/k8s.go
+++ b/plugins/scheduler-k3s/k8s.go
@@ -337,6 +337,51 @@ func (k KubernetesClient) DeleteNode(ctx context.Context, input DeleteNodeInput)
 	return k.Client.CoreV1().Nodes().Delete(ctx, input.Name, metav1.DeleteOptions{})
 }
 
+// DeletePodInput contains all the information needed to delete a Kubernetes pod
+type DeletePodInput struct {
+	// Name is the Kubernetes pod name
+	Name string
+
+	// Namespace is the Kubernetes namespace
+	Namespace string
+
+	// LabelSelector is the Kubernetes label selector
+	LabelSelector string
+}
+
+// DeletePod deletes a Kubernetes pod
+func (k KubernetesClient) DeletePod(ctx context.Context, input DeletePodInput) error {
+	if input.Name == "" && input.LabelSelector == "" {
+		return fmt.Errorf("name or label selector is required")
+	}
+
+	if input.Name != "" && input.LabelSelector != "" {
+		return fmt.Errorf("name and label selector cannot be used together")
+	}
+
+	if input.Name != "" {
+		return k.Client.CoreV1().Pods(input.Namespace).Delete(ctx, input.Name, metav1.DeleteOptions{})
+	}
+
+	// get the pods with the label selector
+	pods, err := k.ListPods(ctx, ListPodsInput{
+		Namespace:     input.Namespace,
+		LabelSelector: input.LabelSelector,
+	})
+	if err != nil {
+		return fmt.Errorf("Error listing pods: %w", err)
+	}
+
+	for _, pod := range pods {
+		err := k.Client.CoreV1().Pods(input.Namespace).Delete(ctx, pod.Name, metav1.DeleteOptions{})
+		if err != nil {
+			return fmt.Errorf("Error deleting pod %s: %w", pod.Name, err)
+		}
+	}
+
+	return nil
+}
+
 // DeleteSecretInput contains all the information needed to delete a Kubernetes secret
 type DeleteSecretInput struct {
 	// Name is the Kubernetes secret name
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 7ae406ee4..de2e9c2c9 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -1212,10 +1212,44 @@ func TriggerSchedulerRun(scheduler string, appName string, envCount int, args []
 		extraEnv["TRACE"] = "true"
 	}
 
+	namespace := getComputedNamespace(appName)
+	clientset, err := NewKubernetesClient()
+	if err != nil {
+		return fmt.Errorf("Error creating kubernetes client: %w", err)
+	}
+
+	if err := clientset.Ping(); err != nil {
+		return fmt.Errorf("kubernetes api not available: %w", err)
+	}
+
 	processType := "run"
 	if os.Getenv("DOKKU_CRON_ID") != "" {
 		processType = "cron"
 		labels["dokku.com/cron-id"] = os.Getenv("DOKKU_CRON_ID")
+		concurrencyPolicy := strings.ToUpper(os.Getenv("DOKKU_CONCURRENCY_POLICY"))
+		switch concurrencyPolicy {
+		case "forbid":
+			// check if there is a running pod with the same dokku.com/cron-id label
+			pods, err := clientset.ListPods(context.Background(), ListPodsInput{
+				Namespace:     namespace,
+				LabelSelector: fmt.Sprintf("dokku.com/cron-id=%s", os.Getenv("DOKKU_CRON_ID")),
+			})
+			if err != nil {
+				return fmt.Errorf("Error listing pods: %w", err)
+			}
+			if len(pods) > 0 {
+				return fmt.Errorf("There is a running pod with the same dokku.com/cron-id label")
+			}
+		case "replace":
+			// delete any existing pod with the same dokku.com/cron-id label
+			err := clientset.DeletePod(context.Background(), DeletePodInput{
+				Namespace:     namespace,
+				LabelSelector: fmt.Sprintf("dokku.com/cron-id=%s", os.Getenv("DOKKU_CRON_ID")),
+			})
+			if err != nil {
+				return fmt.Errorf("Error deleting pod: %w", err)
+			}
+		}
 	}
 
 	imageSourceType, err := common.DockerInspect(image, "{{ index .Config.Labels \"com.dokku.builder-type\" }}")
@@ -1245,7 +1279,6 @@ func TriggerSchedulerRun(scheduler string, appName string, envCount int, args []
 		entrypoint = "/exec"
 	}
 
-	namespace := getComputedNamespace(appName)
 	helmAgent, err := NewHelmAgent(namespace, DevNullPrinter)
 	if err != nil {
 		return fmt.Errorf("Error creating helm agent: %w", err)
@@ -1275,15 +1308,6 @@ func TriggerSchedulerRun(scheduler string, appName string, envCount int, args []
 
 	attachToPod := os.Getenv("DOKKU_DETACH_CONTAINER") != "1"
 
-	clientset, err := NewKubernetesClient()
-	if err != nil {
-		return fmt.Errorf("Error creating kubernetes client: %w", err)
-	}
-
-	if err := clientset.Ping(); err != nil {
-		return fmt.Errorf("kubernetes api not available: %w", err)
-	}
-
 	imagePullSecrets := getComputedImagePullSecrets(appName)
 	if imagePullSecrets == "" {
 		imagePullSecrets = fmt.Sprintf("ims-%s.%d", appName, deploymentID)

From 9aa471c1fdb881373366d37f1cb4b5cf74785f01 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 17 Sep 2025 01:45:56 -0400
Subject: [PATCH 130/427] feat: add support for specifying CNB buildpacks via
 buildpacks command

Closes #7325
---
 .../builders/buildpack-management.md          | 174 ++++++++++++++++
 .../builders/herokuish-buildpacks.md          | 194 +++---------------
 plugins/builder-pack/builder-build            |  14 ++
 3 files changed, 217 insertions(+), 165 deletions(-)
 create mode 100644 docs/deployment/builders/buildpack-management.md

diff --git a/docs/deployment/builders/buildpack-management.md b/docs/deployment/builders/buildpack-management.md
new file mode 100644
index 000000000..c577e26c9
--- /dev/null
+++ b/docs/deployment/builders/buildpack-management.md
@@ -0,0 +1,174 @@
+# Buildpacks Management
+
+> [!NOTE]
+> Buildpacks commands apply to both herokuish and CNB-based builds
+
+```
+buildpacks:add [--index 1] <app> <buildpack>            # Add new app buildpack while inserting into list of buildpacks if necessary
+buildpacks:clear <app>                                  # Clear all buildpacks set on the app
+buildpacks:list <app>                                   # List all buildpacks for an app
+buildpacks:remove <app> <buildpack>                     # Remove a buildpack set on the app
+buildpacks:report [<app>] [<flag>]                      # Displays a buildpack report for one or more apps
+buildpacks:set [--index 1] <app> <buildpack>            # Set new app buildpack at a given position defaulting to the first buildpack if no index is specified
+```
+
+## Usage
+
+### Listing Buildpacks in Use
+
+The `buildpacks:list` command can be used to show buildpacks that have been set for an app. This will omit any auto-detected buildpacks.
+
+```shell
+# running for an app with no buildpacks specified
+dokku buildpacks:list node-js-app
+```
+
+```
+-----> test buildpack urls
+```
+
+```shell
+# running for an app with two buildpacks specified
+dokku buildpacks:list node-js-app
+```
+
+```
+-----> test buildpack urls
+       https://github.com/heroku/heroku-buildpack-python.git
+       https://github.com/heroku/heroku-buildpack-nodejs.git
+```
+
+### Adding custom buildpacks
+
+> Please check the documentation for your particular buildpack as you may need to include configuration files (such as a Procfile) in your project root.
+
+To add a custom buildpack, use the `buildpacks:add` command:
+
+```shell
+dokku buildpacks:add node-js-app https://github.com/heroku/heroku-buildpack-nodejs.git
+```
+
+When no buildpacks are currently specified, the specified buildpack will be the only one executed for detection and compilation.
+
+Multiple buildpacks may be specified by using the `buildpacks:add` command multiple times.
+
+```shell
+dokku buildpacks:add node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
+dokku buildpacks:add node-js-app https://github.com/heroku/heroku-buildpack-nodejs.git
+```
+
+Buildpacks are executed in order, may be inserted at a specified index via the `--index` flag. This flag is specified starting at a 1-index value.
+
+```shell
+# will add the golang buildpack at the second position, bumping all proceeding ones by 1 position
+dokku buildpacks:add --index 2 node-js-app https://github.com/heroku/heroku-buildpack-golang.git
+```
+
+### Overwriting a buildpack position
+
+In some cases, it may be necessary to swap out a given buildpack. Rather than needing to re-specify each buildpack, the `buildpacks:set` command can be used to overwrite a buildpack at a given position.
+
+```shell
+dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
+```
+
+By default, this will overwrite the _first_ buildpack specified. To specify an index, the `--index` flag may be used. This flag is specified starting at a 1-index value, and defaults to `1`.
+
+```shell
+# the following are equivalent commands
+dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
+dokku buildpacks:set --index 1 node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
+```
+
+If the index specified is larger than the number of buildpacks currently configured, the buildpack will be appended to the end of the list.
+
+```shell
+dokku buildpacks:set --index 99 node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
+```
+
+### Removing a buildpack
+
+> At least one of a buildpack or index must be specified
+
+A single buildpack can be removed by name via the `buildpacks:remove` command.
+
+```shell
+dokku buildpacks:remove node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
+```
+
+Buildpacks can also be removed by index via the `--index` flag. This flag is specified starting at a 1-index value.
+
+```shell
+dokku buildpacks:remove node-js-app --index 1
+```
+
+### Clearing all buildpacks
+
+> This does not affect automatically detected buildpacks, nor does it impact any specified `BUILDPACK_URL` environment variable.
+
+The `buildpacks:clear` command can be used to clear all configured buildpacks for a specified app.
+
+```shell
+dokku buildpacks:clear node-js-app
+```
+
+### Using a specific buildpack version
+
+> Always remember to pin your buildpack versions when using the multi-buildpacks method, or you may find deploys changing your deployed environment.
+
+By default, builders will pin their vendored buildpacks, resulting in a consistent build result for your application. There may be occasions where the pinned version results in a broken deploy, or does not have a particular feature that is required to build your project. To use a more recent version of a given buildpack, the buildpack may be specified _without_ a Git commit SHA like so:
+
+```shell
+# using the latest nodejs buildpack
+dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-nodejs
+```
+
+This will use the latest commit on the `master` branch of the specified buildpack. To pin to a newer version of a buildpack, a sha may also be specified by using the form `REPOSITORY_URL#COMMIT_SHA`, where `COMMIT_SHA` is any tree-ish git object - usually a git tag.
+
+```shell
+# using v87 of the nodejs buildpack
+dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-nodejs#v87
+```
+
+### Displaying buildpack reports for an app
+
+You can get a report about the app's buildpacks status using the `buildpacks:report` command:
+
+```shell
+dokku buildpacks:report
+```
+
+```
+=====> node-js-app buildpacks information
+       Buildpacks computed stack:  gliderlabs/herokuish:v0.7.0-22
+       Buildpacks global stack:    gliderlabs/herokuish:latest-24
+       Buildpacks list:            https://github.com/heroku/heroku-buildpack-nodejs.git
+       Buildpacks stack:           gliderlabs/herokuish:v0.7.0-20
+=====> python-sample buildpacks information
+       Buildpacks computed stack:  gliderlabs/herokuish:latest-24
+       Buildpacks global stack:    gliderlabs/herokuish:latest-24
+       Buildpacks list:            https://github.com/heroku/heroku-buildpack-nodejs.git,https://github.com/heroku/heroku-buildpack-python.git
+       Buildpacks stack:
+=====> ruby-sample buildpacks information
+       Buildpacks computed stack:  gliderlabs/herokuish:latest-24
+       Buildpacks global stack:    gliderlabs/herokuish:latest-24
+       Buildpacks list:
+       Buildpacks stack:
+```
+
+You can run the command for a specific app also.
+
+```shell
+dokku buildpacks:report node-js-app
+```
+
+```
+=====> node-js-app buildpacks information
+       Buildpacks list:               https://github.com/heroku/heroku-buildpack-nodejs.git
+```
+
+You can pass flags which will output only the value of the specific information you want. For example:
+
+```shell
+dokku buildpacks:report node-js-app --buildpacks-list
+```
diff --git a/docs/deployment/builders/herokuish-buildpacks.md b/docs/deployment/builders/herokuish-buildpacks.md
index f35b5e687..dfaedfbd2 100644
--- a/docs/deployment/builders/herokuish-buildpacks.md
+++ b/docs/deployment/builders/herokuish-buildpacks.md
@@ -4,12 +4,6 @@
 > Subcommands new as of 0.15.0
 
 ```
-buildpacks:add [--index 1] <app> <buildpack>            # Add new app buildpack while inserting into list of buildpacks if necessary
-buildpacks:clear <app>                                  # Clear all buildpacks set on the app
-buildpacks:list <app>                                   # List all buildpacks for an app
-buildpacks:remove <app> <buildpack>                     # Remove a buildpack set on the app
-buildpacks:report [<app>] [<flag>]                      # Displays a buildpack report for one or more apps
-buildpacks:set [--index 1] <app> <buildpack>            # Set new app buildpack at a given position defaulting to the first buildpack if no index is specified
 buildpacks:set-property [--global|<app>] <key> <value>  # Set or clear a buildpacks property for an app
 ```
 
@@ -49,104 +43,6 @@ dokku builder:set node-js-app selected herokuish
 
 > Dokku will only select the `dockerfile` builder if both the `herokuish` and `pack` builders are not detected and a Dockerfile exists. See the [dockerfile builder documentation](/docs/deployment/builders/dockerfiles.md) for more information on how that builder functions.
 
-### Listing Buildpacks in Use
-
-The `buildpacks:list` command can be used to show buildpacks that have been set for an app. This will omit any auto-detected buildpacks.
-
-```shell
-# running for an app with no buildpacks specified
-dokku buildpacks:list node-js-app
-```
-
-```
------> test buildpack urls
-```
-
-```shell
-# running for an app with two buildpacks specified
-dokku buildpacks:list node-js-app
-```
-
-```
------> test buildpack urls
-       https://github.com/heroku/heroku-buildpack-python.git
-       https://github.com/heroku/heroku-buildpack-nodejs.git
-```
-
-### Adding custom buildpacks
-
-> Please check the documentation for your particular buildpack as you may need to include configuration files (such as a Procfile) in your project root.
-
-To add a custom buildpack, use the `buildpacks:add` command:
-
-```shell
-dokku buildpacks:add node-js-app https://github.com/heroku/heroku-buildpack-nodejs.git
-```
-
-When no buildpacks are currently specified, the specified buildpack will be the only one executed for detection and compilation.
-
-Multiple buildpacks may be specified by using the `buildpacks:add` command multiple times.
-
-```shell
-dokku buildpacks:add node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
-dokku buildpacks:add node-js-app https://github.com/heroku/heroku-buildpack-nodejs.git
-```
-
-Buildpacks are executed in order, may be inserted at a specified index via the `--index` flag. This flag is specified starting at a 1-index value.
-
-```shell
-# will add the golang buildpack at the second position, bumping all proceeding ones by 1 position
-dokku buildpacks:add --index 2 node-js-app https://github.com/heroku/heroku-buildpack-golang.git
-```
-
-### Overwriting a buildpack position
-
-In some cases, it may be necessary to swap out a given buildpack. Rather than needing to re-specify each buildpack, the `buildpacks:set` command can be used to overwrite a buildpack at a given position.
-
-```shell
-dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
-```
-
-By default, this will overwrite the _first_ buildpack specified. To specify an index, the `--index` flag may be used. This flag is specified starting at a 1-index value, and defaults to `1`.
-
-```shell
-# the following are equivalent commands
-dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
-dokku buildpacks:set --index 1 node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
-```
-
-If the index specified is larger than the number of buildpacks currently configured, the buildpack will be appended to the end of the list.
-
-```shell
-dokku buildpacks:set --index 99 node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
-```
-
-### Removing a buildpack
-
-> At least one of a buildpack or index must be specified
-
-A single buildpack can be removed by name via the `buildpacks:remove` command.
-
-```shell
-dokku buildpacks:remove node-js-app https://github.com/heroku/heroku-buildpack-ruby.git
-```
-
-Buildpacks can also be removed by index via the `--index` flag. This flag is specified starting at a 1-index value.
-
-```shell
-dokku buildpacks:remove node-js-app --index 1
-```
-
-### Clearing all buildpacks
-
-> This does not affect automatically detected buildpacks, nor does it impact any specified `BUILDPACK_URL` environment variable.
-
-The `buildpacks:clear` command can be used to clear all configured buildpacks for a specified app.
-
-```shell
-dokku buildpacks:clear node-js-app
-```
-
 ### Customizing the Buildpack stack builder
 
 > [!IMPORTANT]
@@ -207,49 +103,6 @@ The default value may be set by passing an empty value for the option.
 dokku builder-herokuish:set --global allowed
 ```
 
-### Displaying buildpack reports for an app
-
-You can get a report about the app's buildpacks status using the `buildpacks:report` command:
-
-```shell
-dokku buildpacks:report
-```
-
-```
-=====> node-js-app buildpacks information
-       Buildpacks computed stack:  gliderlabs/herokuish:v0.7.0-22
-       Buildpacks global stack:    gliderlabs/herokuish:latest-24
-       Buildpacks list:            https://github.com/heroku/heroku-buildpack-nodejs.git
-       Buildpacks stack:           gliderlabs/herokuish:v0.7.0-20
-=====> python-sample buildpacks information
-       Buildpacks computed stack:  gliderlabs/herokuish:latest-24
-       Buildpacks global stack:    gliderlabs/herokuish:latest-24
-       Buildpacks list:            https://github.com/heroku/heroku-buildpack-nodejs.git,https://github.com/heroku/heroku-buildpack-python.git
-       Buildpacks stack:
-=====> ruby-sample buildpacks information
-       Buildpacks computed stack:  gliderlabs/herokuish:latest-24
-       Buildpacks global stack:    gliderlabs/herokuish:latest-24
-       Buildpacks list:
-       Buildpacks stack:
-```
-
-You can run the command for a specific app also.
-
-```shell
-dokku buildpacks:report node-js-app
-```
-
-```
-=====> node-js-app buildpacks information
-       Buildpacks list:               https://github.com/heroku/heroku-buildpack-nodejs.git
-```
-
-You can pass flags which will output only the value of the specific information you want. For example:
-
-```shell
-dokku buildpacks:report node-js-app --buildpacks-list
-```
-
 ### Displaying builder-herokuish reports for an app
 
 > [!IMPORTANT]
@@ -309,24 +162,6 @@ If an application was previously deployed via Dockerfile, the following commands
 dokku ports:clear node-js-app
 ```
 
-### Using a specific buildpack version
-
-> Always remember to pin your buildpack versions when using the multi-buildpacks method, or you may find deploys changing your deployed environment.
-
-By default, Dokku uses the [gliderlabs/herokuish](https://github.com/gliderlabs/herokuish/) project, which pins all of it's vendored buildpacks. There may be occasions where the pinned version results in a broken deploy, or does not have a particular feature that is required to build your project. To use a more recent version of a given buildpack, the buildpack may be specified _without_ a Git commit SHA like so:
-
-```shell
-# using the latest nodejs buildpack
-dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-nodejs
-```
-
-This will use the latest commit on the `master` branch of the specified buildpack. To pin to a newer version of a buildpack, a sha may also be specified by using the form `REPOSITORY_URL#COMMIT_SHA`, where `COMMIT_SHA` is any tree-ish git object - usually a git tag.
-
-```shell
-# using v87 of the nodejs buildpack
-dokku buildpacks:set node-js-app https://github.com/heroku/heroku-buildpack-nodejs#v87
-```
-
 ### `curl` build timeouts
 
 Certain buildpacks may time out in retrieving dependencies via `curl`. This can happen when your network connection is poor or if there is significant network congestion. You may see a message similar to `gzip: stdin: unexpected end of file` after a `curl` command.
@@ -345,3 +180,32 @@ See the [repository management documentation](/docs/advanced-usage/repository-ma
 ### Specifying commands via Procfile
 
 See the [Procfile documentation](/docs/processes/process-management.md#procfile) for more information on how to specify different processes for your app.
+
+### Listing Buildpacks in Use
+
+See the [buildpack management documentation](/docs/processes/process-management.md#listing-buildpacks-in-use) for more information on how to list buildpacks in use.
+
+### Adding custom buildpacks
+
+See the [buildpack management documentation](/docs/processes/process-management.md#adding-custom-buildpacks) for more information on how to add custom buildpacks.
+
+### Overwriting a buildpack position
+
+See the [buildpack management documentation](/docs/processes/process-management.md#overwriting-a-buildpack-position) for more information on how to overwrite a buildpack position.
+
+### Removing a buildpack
+
+See the [buildpack management documentation](/docs/processes/process-management.md#removing-a-buildpack) for more information on how to remove a buildpack.
+
+### Clearing all buildpacks
+
+See the [buildpack management documentation](/docs/processes/process-management.md#clearing-all-buildpacks) for more information on how to clear all buildpacks.
+
+### Using a specific buildpack version
+
+See the [buildpack management documentation](/docs/processes/process-management.md#using-a-specific-buildpack-version) for more information on how to using a specific buildpack version
+
+
+### Displaying buildpack reports for an app
+
+See the [buildpack management documentation](/docs/processes/process-management.md#displaying-buildpack-reports-for-an-app) for more information on how to display buildpack reports for an app.
\ No newline at end of file
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 627662202..192ebb33c 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -65,6 +65,20 @@ trigger-builder-pack-builder-build() {
     esac
   done
 
+  if [ -z "$BUILDPACK_URL" ]; then
+    PACK_ARGS+=("--builder")
+    PACK_ARGS+=("$BUILDPACK_URL")
+  elif [ -f "$SOURCECODE_WORK_DIR/.buildpacks" ]; then
+    while read -r buildpack; do
+      if [ -z "$buildpack" ]; then
+        continue
+      fi
+
+      PACK_ARGS+=("--builder")
+      PACK_ARGS+=("$buildpack")
+    done < "$SOURCECODE_WORK_DIR/.buildpacks"
+  fi
+
   pack build "$IMAGE" --builder "$DOKKU_CNB_BUILDER" --path "$SOURCECODE_WORK_DIR" --default-process web "${PACK_ARGS[@]}" "${ENV_ARGS[@]}"
   docker-image-labeler relabel --label=dokku --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=pack --label=com.dokku.app-name=$APP "$IMAGE"
 

From 97714e9c22954cf10b0f69910b9d15a0e6a31980 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 20:28:13 -0500
Subject: [PATCH 131/427] feat: filter out unsupported build arguments with
 pack

While this will require future updates if pack supports new build arguments, it also ensures builds safely consume arguments from other plugins.
---
 plugins/builder-pack/builder-build | 123 ++++++++++++++++++++++++++++-
 1 file changed, 120 insertions(+), 3 deletions(-)

diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 627662202..7eb612280 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -50,17 +50,134 @@ trigger-builder-pack-builder-build() {
   declare -a PACK_ARGS
   while true; do
     case "$1" in
-      --volume=* | -v=*)
+      -B | --builder)
+        PACK_ARGS+=("--builder")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -b | --buildpack)
+        PACK_ARGS+=("--buildpack")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -r | --buildpack-registry)
+        PACK_ARGS+=("--buildpack-registry")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -D | --default-process)
+        PACK_ARGS+=("--default-process")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -d | --descriptor)
+        PACK_ARGS+=("--descriptor")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -e | --env)
+        PACK_ARGS+=("--env")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -p | --path)
+        PACK_ARGS+=("--path")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -t | --tag)
+        PACK_ARGS+=("--tag")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache | --cache-image | --creation-time | --docker-host | --env-file | --extension | --gid | --insecure-registry | --lifecycle-image | --network | --platform | --post-buildpack | --pre-buildpack | --previous-image | --pull-policy | --report-output-dir | --run-image | --sbom-output-dir | --uid | --workspace)
         PACK_ARGS+=("$1")
-        shift
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --clear-cache | --disable-system-buildpacks | --publish | --trust-builder | --trust-extra-buildpacks | --userns-host)
+        PACK_ARGS+=("$1")
+        shift 1
         ;;
       --volume | -v)
         PACK_ARGS+=("--volume")
         PACK_ARGS+=("$2")
         shift 2
         ;;
+      -B=* | --builder=*)
+        if [[ "$1" == "--builder=*" ]]; then
+          PACK_ARGS+=("--builder" "${1#--builder=}")
+        elif [[ "$1" == "-B=*" ]]; then
+          PACK_ARGS+=("--builder" "${1#-B=}")
+        fi
+        shift 1
+        ;;
+      -b=* | --buildpack=*)
+        if [[ "$1" == "--buildpack=*" ]]; then
+          PACK_ARGS+=("--buildpack" "${1#--buildpack=}")
+        elif [[ "$1" == "-b=*" ]]; then
+          PACK_ARGS+=("--buildpack" "${1#-b=}")
+        fi
+        shift 1
+        ;;
+      -r=* | --buildpack-registry=*)
+        if [[ "$1" == "--buildpack-registry=*" ]]; then
+          PACK_ARGS+=("--buildpack-registry" "${1#--buildpack-registry=}")
+        elif [[ "$1" == "-r=*" ]]; then
+          PACK_ARGS+=("--buildpack-registry" "${1#-r=}")
+        fi
+        shift 2
+        ;;
+      -D=* | --default-process=*)
+        if [[ "$1" == "--default-process=*" ]]; then
+          PACK_ARGS+=("--default-process" "${1#--default-process=}")
+        elif [[ "$1" == "-D=*" ]]; then
+          PACK_ARGS+=("--default-process" "${1#-D=}")
+        fi
+        shift  1
+        ;;
+      -d=* | --descriptor=*)
+        if [[ "$1" == "--descriptor=*" ]]; then
+          PACK_ARGS+=("--descriptor" "${1#--descriptor=}")
+        elif [[ "$1" == "-d=*" ]]; then
+          PACK_ARGS+=("--descriptor" "${1#-d=}")
+        fi
+        shift 1
+        ;;
+      -e=* | --env=*)
+        if [[ "$1" == "--env=*" ]]; then
+          PACK_ARGS+=("--env" "${1#--env=}")
+        elif [[ "$1" == "-e=*" ]]; then
+          PACK_ARGS+=("--env" "${1#-e=}")
+        fi
+        shift 1
+        ;;
+      -p=* | --path=*)
+        if [[ "$1" == "--path=*" ]]; then
+          PACK_ARGS+=("--path" "${1#--path=}")
+        elif [[ "$1" == "-p=*" ]]; then
+          PACK_ARGS+=("--path" "${1#-p=}")
+        fi
+        shift 1
+        ;;
+      -t=* | --tag=*)
+        if [[ "$1" == "--tag=*" ]]; then
+          PACK_ARGS+=("--tag" "${1#--tag=}")
+        elif [[ "$1" == "-t=*" ]]; then
+          PACK_ARGS+=("--tag" "${1#-t=}")
+        fi
+        shift 1
+        ;;
+      --volume=* | -v=*)
+        if [[ "$1" == "--volume=*" ]]; then
+          PACK_ARGS+=("--volume" "${1#--volume=}")
+        elif [[ "$1" == "-v=*" ]]; then
+          PACK_ARGS+=("--volume" "${1#-v=}")
+        fi
+        shift 1
+        ;;
       *)
-        break
+        continue
         ;;
     esac
   done

From 8cb59892207aea90adeefd32eb14a725904b7012 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:27:26 -0500
Subject: [PATCH 132/427] fix: remove manually set arguments

---
 plugins/builder-pack/builder-build | 44 +-----------------------------
 1 file changed, 1 insertion(+), 43 deletions(-)

diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 7eb612280..7d303a143 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -38,23 +38,15 @@ trigger-builder-pack-builder-build() {
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
-  [[ "$DOKKU_TRACE" ]] && DOCKER_ARGS+=" --env=TRACE=true "
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
+  [[ "$DOKKU_TRACE" ]] && DOCKER_ARGS+=" --env=TRACE=true "
 
   DOCKER_ARGS=" $DOCKER_ARGS "
-  declare -a ARG_ARRAY
-  eval "ARG_ARRAY=($DOCKER_ARGS)"
-
   eval set -- "$DOCKER_ARGS"
 
   declare -a PACK_ARGS
   while true; do
     case "$1" in
-      -B | --builder)
-        PACK_ARGS+=("--builder")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
       -b | --buildpack)
         PACK_ARGS+=("--buildpack")
         PACK_ARGS+=("$2")
@@ -65,11 +57,6 @@ trigger-builder-pack-builder-build() {
         PACK_ARGS+=("$2")
         shift 2
         ;;
-      -D | --default-process)
-        PACK_ARGS+=("--default-process")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
       -d | --descriptor)
         PACK_ARGS+=("--descriptor")
         PACK_ARGS+=("$2")
@@ -80,11 +67,6 @@ trigger-builder-pack-builder-build() {
         PACK_ARGS+=("$2")
         shift 2
         ;;
-      -p | --path)
-        PACK_ARGS+=("--path")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
       -t | --tag)
         PACK_ARGS+=("--tag")
         PACK_ARGS+=("$2")
@@ -104,14 +86,6 @@ trigger-builder-pack-builder-build() {
         PACK_ARGS+=("$2")
         shift 2
         ;;
-      -B=* | --builder=*)
-        if [[ "$1" == "--builder=*" ]]; then
-          PACK_ARGS+=("--builder" "${1#--builder=}")
-        elif [[ "$1" == "-B=*" ]]; then
-          PACK_ARGS+=("--builder" "${1#-B=}")
-        fi
-        shift 1
-        ;;
       -b=* | --buildpack=*)
         if [[ "$1" == "--buildpack=*" ]]; then
           PACK_ARGS+=("--buildpack" "${1#--buildpack=}")
@@ -128,14 +102,6 @@ trigger-builder-pack-builder-build() {
         fi
         shift 2
         ;;
-      -D=* | --default-process=*)
-        if [[ "$1" == "--default-process=*" ]]; then
-          PACK_ARGS+=("--default-process" "${1#--default-process=}")
-        elif [[ "$1" == "-D=*" ]]; then
-          PACK_ARGS+=("--default-process" "${1#-D=}")
-        fi
-        shift  1
-        ;;
       -d=* | --descriptor=*)
         if [[ "$1" == "--descriptor=*" ]]; then
           PACK_ARGS+=("--descriptor" "${1#--descriptor=}")
@@ -152,14 +118,6 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
-      -p=* | --path=*)
-        if [[ "$1" == "--path=*" ]]; then
-          PACK_ARGS+=("--path" "${1#--path=}")
-        elif [[ "$1" == "-p=*" ]]; then
-          PACK_ARGS+=("--path" "${1#-p=}")
-        fi
-        shift 1
-        ;;
       -t=* | --tag=*)
         if [[ "$1" == "--tag=*" ]]; then
           PACK_ARGS+=("--tag" "${1#--tag=}")

From 58046ea6dc7d43cb5d663a33379ea674d7c5d9e2 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:28:53 -0500
Subject: [PATCH 133/427] chore: move flags around for better organization

---
 plugins/builder-pack/builder-build | 68 +++++++++++++++---------------
 1 file changed, 34 insertions(+), 34 deletions(-)

diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 7d303a143..237c54bde 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -52,40 +52,6 @@ trigger-builder-pack-builder-build() {
         PACK_ARGS+=("$2")
         shift 2
         ;;
-      -r | --buildpack-registry)
-        PACK_ARGS+=("--buildpack-registry")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
-      -d | --descriptor)
-        PACK_ARGS+=("--descriptor")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
-      -e | --env)
-        PACK_ARGS+=("--env")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
-      -t | --tag)
-        PACK_ARGS+=("--tag")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
-      --cache | --cache-image | --creation-time | --docker-host | --env-file | --extension | --gid | --insecure-registry | --lifecycle-image | --network | --platform | --post-buildpack | --pre-buildpack | --previous-image | --pull-policy | --report-output-dir | --run-image | --sbom-output-dir | --uid | --workspace)
-        PACK_ARGS+=("$1")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
-      --clear-cache | --disable-system-buildpacks | --publish | --trust-builder | --trust-extra-buildpacks | --userns-host)
-        PACK_ARGS+=("$1")
-        shift 1
-        ;;
-      --volume | -v)
-        PACK_ARGS+=("--volume")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
       -b=* | --buildpack=*)
         if [[ "$1" == "--buildpack=*" ]]; then
           PACK_ARGS+=("--buildpack" "${1#--buildpack=}")
@@ -94,6 +60,11 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
+      -r | --buildpack-registry)
+        PACK_ARGS+=("--buildpack-registry")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
       -r=* | --buildpack-registry=*)
         if [[ "$1" == "--buildpack-registry=*" ]]; then
           PACK_ARGS+=("--buildpack-registry" "${1#--buildpack-registry=}")
@@ -102,6 +73,11 @@ trigger-builder-pack-builder-build() {
         fi
         shift 2
         ;;
+      -d | --descriptor)
+        PACK_ARGS+=("--descriptor")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
       -d=* | --descriptor=*)
         if [[ "$1" == "--descriptor=*" ]]; then
           PACK_ARGS+=("--descriptor" "${1#--descriptor=}")
@@ -110,6 +86,11 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
+      -e | --env)
+        PACK_ARGS+=("--env")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
       -e=* | --env=*)
         if [[ "$1" == "--env=*" ]]; then
           PACK_ARGS+=("--env" "${1#--env=}")
@@ -118,6 +99,11 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
+      -t | --tag)
+        PACK_ARGS+=("--tag")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
       -t=* | --tag=*)
         if [[ "$1" == "--tag=*" ]]; then
           PACK_ARGS+=("--tag" "${1#--tag=}")
@@ -126,6 +112,11 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
+      --volume | -v)
+        PACK_ARGS+=("--volume")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
       --volume=* | -v=*)
         if [[ "$1" == "--volume=*" ]]; then
           PACK_ARGS+=("--volume" "${1#--volume=}")
@@ -134,6 +125,15 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
+      --cache | --cache-image | --creation-time | --docker-host | --env-file | --extension | --gid | --insecure-registry | --lifecycle-image | --network | --platform | --post-buildpack | --pre-buildpack | --previous-image | --pull-policy | --report-output-dir | --run-image | --sbom-output-dir | --uid | --workspace)
+        PACK_ARGS+=("$1")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --clear-cache | --disable-system-buildpacks | --publish | --trust-builder | --trust-extra-buildpacks | --userns-host)
+        PACK_ARGS+=("$1")
+        shift 1
+        ;;
       *)
         continue
         ;;

From a292e41015147673bbe76c274dec64b69c801a76 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:33:03 -0500
Subject: [PATCH 134/427] fix: remove flags that do not make sense in build
 context

---
 plugins/builder-pack/builder-build | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 237c54bde..59554dada 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -125,7 +125,8 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
-      --cache | --cache-image | --creation-time | --docker-host | --env-file | --extension | --gid | --insecure-registry | --lifecycle-image | --network | --platform | --post-buildpack | --pre-buildpack | --previous-image | --pull-policy | --report-output-dir | --run-image | --sbom-output-dir | --uid | --workspace)
+      --cache | --cache-image | --creation-time | --env-file | --extension | --gid | --insecure-registry | --lifecycle-image | --network | --platform | --post-buildpack | --pre-buildpack | --previous-image | --pull-policy | --run-image | --uid | --workspace)
+        # todo: additionally support --flag=value syntax
         PACK_ARGS+=("$1")
         PACK_ARGS+=("$2")
         shift 2

From c3d103e46c9b9c5eb65a6ae748058694e5eaf893 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:39:27 -0500
Subject: [PATCH 135/427] fix: remove flag that does not make sense in build
 context

---
 plugins/builder-pack/builder-build | 13 -------------
 1 file changed, 13 deletions(-)

diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 59554dada..e3d3eef84 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -73,19 +73,6 @@ trigger-builder-pack-builder-build() {
         fi
         shift 2
         ;;
-      -d | --descriptor)
-        PACK_ARGS+=("--descriptor")
-        PACK_ARGS+=("$2")
-        shift 2
-        ;;
-      -d=* | --descriptor=*)
-        if [[ "$1" == "--descriptor=*" ]]; then
-          PACK_ARGS+=("--descriptor" "${1#--descriptor=}")
-        elif [[ "$1" == "-d=*" ]]; then
-          PACK_ARGS+=("--descriptor" "${1#-d=}")
-        fi
-        shift 1
-        ;;
       -e | --env)
         PACK_ARGS+=("--env")
         PACK_ARGS+=("$2")

From 03e90ed2a0678e6576c7da7bce433eb14d6acd75 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:49:48 -0500
Subject: [PATCH 136/427] feat: filter out unsupported build arguments with
 nixpacks

While this will require future updates if nixpacks supports new build arguments, it also ensures builds safely consume arguments from other plugins.
---
 plugins/builder-nixpacks/builder-build | 132 ++++++++++++++++++++++++-
 1 file changed, 127 insertions(+), 5 deletions(-)

diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index c27a44921..d2eede6a3 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -35,11 +35,133 @@ trigger-builder-nixpacks-builder-build() {
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
+  DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
 
-  # strip --link, --volume and -v args from DOCKER_ARGS
-  local DOCKER_ARGS=$(sed -e "s/^--link=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--link[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^-v[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" <<<"$DOCKER_ARGS")
-  declare -a ARG_ARRAY
-  eval "ARG_ARRAY=($DOCKER_ARGS)"
+  DOCKER_ARGS=" $DOCKER_ARGS "
+  eval set -- "$DOCKER_ARGS"
+
+  declare -a NIXPACKS_ARGS
+  while true; do
+    case "$1" in
+      -t | --tag)
+        NIXPACKS_ARGS+=("--tag")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -t=* | --tag=*)
+        if [[ "$1" == "--tag=*" ]]; then
+          NIXPACKS_ARGS+=("--tag" "${1#--tag=}")
+        elif [[ "$1" == "-t=*" ]]; then
+          NIXPACKS_ARGS+=("--tag" "${1#-t=}")
+        fi
+        shift 1
+        ;;
+      -i | --install-cmd)
+        NIXPACKS_ARGS+=("--install-cmd")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -i=* | --install-cmd=*)
+        if [[ "$1" == "--install-cmd=*" ]]; then
+          NIXPACKS_ARGS+=("--install-cmd" "${1#--install-cmd=}")
+        elif [[ "$1" == "-i=*" ]]; then
+          NIXPACKS_ARGS+=("--install-cmd" "${1#-i=}")
+        fi
+        shift 1
+        ;;
+      -l | --label)
+        NIXPACKS_ARGS+=("--label")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -l=* | --label=*)
+        if [[ "$1" == "--label=*" ]]; then
+          NIXPACKS_ARGS+=("--label" "${1#--label=}")
+        elif [[ "$1" == "-l=*" ]]; then
+          NIXPACKS_ARGS+=("--label" "${1#-l=}")
+        fi
+        shift 1
+        ;;
+      -b | --build-cmd)
+        NIXPACKS_ARGS+=("--build-cmd")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -b=* | --build-cmd=*)
+        if [[ "$1" == "--build-cmd=*" ]]; then
+          NIXPACKS_ARGS+=("--build-cmd" "${1#--build-cmd=}")
+        elif [[ "$1" == "-b=*" ]]; then
+          NIXPACKS_ARGS+=("--build-cmd" "${1#-b=}")
+        fi
+        shift 1
+        ;;
+      -s | --start-cmd)
+        NIXPACKS_ARGS+=("--start-cmd")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -s=* | --start-cmd=*)
+        if [[ "$1" == "--start-cmd=*" ]]; then
+          NIXPACKS_ARGS+=("--start-cmd" "${1#--start-cmd=}")
+        elif [[ "$1" == "-s=*" ]]; then
+          NIXPACKS_ARGS+=("--start-cmd" "${1#-s=}")
+        fi
+        shift 1
+        ;;
+      -p | --pkgs)
+        NIXPACKS_ARGS+=("--pkgs")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -p=* | --pkgs=*)
+        if [[ "$1" == "--pkgs=*" ]]; then
+          NIXPACKS_ARGS+=("--pkgs" "${1#--pkgs=}")
+        elif [[ "$1" == "-p=*" ]]; then
+          NIXPACKS_ARGS+=("--pkgs" "${1#-p=}")
+        fi
+        shift 1
+        ;;
+      -a | --apt)
+        NIXPACKS_ARGS+=("--apt")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -a=* | --apt=*)
+        if [[ "$1" == "--apt=*" ]]; then
+          NIXPACKS_ARGS+=("--apt" "${1#--apt=}")
+        elif [[ "$1" == "-a=*" ]]; then
+          NIXPACKS_ARGS+=("--apt" "${1#-a=}")
+        fi
+        shift 1
+        ;;
+      -e | --env)
+        NIXPACKS_ARGS+=("--env")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      -e=* | --env=*)
+        if [[ "$1" == "--env=*" ]]; then
+          NIXPACKS_ARGS+=("--env" "${1#--env=}")
+        elif [[ "$1" == "-e=*" ]]; then
+          NIXPACKS_ARGS+=("--env" "${1#-e=}")
+        fi
+        shift 1
+        ;;
+      --platform | --cache-key | --incremental-cache-image | --libs | --cache-from | --docker-host | --add-host | --docker-tls-verify)
+        # todo: additionally support --flag=value syntax
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --no-cache | --inline-cache | --no-error-without-start)
+        NIXPACKS_ARGS+=("$1")
+        shift 1
+        ;;
+      *)
+        continue
+        ;;
+    esac
+  done
 
   eval "$(config_export app "$APP" --merged)"
 
@@ -50,7 +172,7 @@ trigger-builder-nixpacks-builder-build() {
   fi
 
   # shellcheck disable=SC2086
-  if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS "${ARG_ARRAY[@]}" $NIXPACKS_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
   fi

From 11c2497b311ed5a1b81ae3d903587f5d0502b774 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:59:12 -0500
Subject: [PATCH 137/427] feat: filter out unsupported build arguments with
 railpacks

While this will require future updates if railpacks supports new build arguments, it also ensures builds safely consume arguments from other plugins.
---
 plugins/builder-railpack/builder-build | 121 +++++++++++++++++++++----
 1 file changed, 104 insertions(+), 17 deletions(-)

diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index e0716522d..5d4c8faf0 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -27,30 +27,117 @@ trigger-builder-railpack-builder-build() {
 
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
-  no_cache="$(fn-builder-railpack-computed-no-cache "$APP")"
-  RAILPACK_ARGS=""
-  if [[ "$no_cache" == "true" ]]; then
-    RAILPACK_ARGS="$RAILPACK_ARGS --no-cache"
-  fi
-
-  local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
-  DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
-
-  # strip --link, --volume and -v args from DOCKER_ARGS
-  local DOCKER_ARGS=$(sed -e "s/^--link=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--link[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^-v[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" <<<"$DOCKER_ARGS")
-  declare -a ARG_ARRAY
-  eval "ARG_ARRAY=($DOCKER_ARGS)"
-
-  eval "$(config_export app "$APP" --merged)"
-
   if [[ -f "$SOURCECODE_WORK_DIR/Procfile" ]]; then
     if procfile-util exists --process-type release; then
       procfile-util delete --process-type release
     fi
   fi
 
+  local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
+  DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
+  [[ "$(fn-builder-railpack-computed-no-cache "$APP")" == "true" ]] && DOCKER_ARGS+=" --no-cache"
+
+  DOCKER_ARGS=" $DOCKER_ARGS "
+  eval set -- "$DOCKER_ARGS"
+
+  declare -a RAILPACK_ARGS
+  while true; do
+    case "$1" in
+      --platform)
+        RAILPACK_ARGS+=("--platform")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --platform=*)
+        if [[ "$1" == "--buildpack=*" ]]; then
+          RAILPACK_ARGS+=("--platform" "${1#--platform=}")
+        elif [[ "$1" == "--platform=*" ]]; then
+          RAILPACK_ARGS+=("--platform" "${1#--platform=}")
+        fi
+        shift 1
+        ;;
+      --progress)
+        RAILPACK_ARGS+=("--progress")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --progress=*)
+        if [[ "$1" == "--progress=*" ]]; then
+          RAILPACK_ARGS+=("--progress" "${1#--progress=}")
+        fi
+        shift 1
+        ;;
+      --cache-key)
+        RAILPACK_ARGS+=("--cache-key")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-key=*)
+        if [[ "$1" == "--cache-key=*" ]]; then
+          RAILPACK_ARGS+=("--cache-key" "${1#--cache-key=}")
+        fi
+        shift 1
+        ;;
+      -e | --env)
+        RAILPACK_ARGS+=("--env")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      -e=* | --env=*)
+        if [[ "$1" == "--env=*" ]]; then
+          RAILPACK_ARGS+=("--env" "${1#--env=}")
+        elif [[ "$1" == "--env=*" ]]; then
+          RAILPACK_ARGS+=("--env" "${1#--env=}")
+        fi
+        shift 1
+        ;;
+      --previous)
+        RAILPACK_ARGS+=("--previous")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --previous=*)
+        if [[ "$1" == "--previous=*" ]]; then
+          RAILPACK_ARGS+=("--previous" "${1#--previous=}")
+        fi
+        shift 1
+        ;;
+      --build-cmd)
+        RAILPACK_ARGS+=("--build-cmd")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --build-cmd=*)
+        if [[ "$1" == "--build-cmd=*" ]]; then
+          RAILPACK_ARGS+=("--build-cmd" "${1#--build-cmd=}")
+        fi
+        shift 1
+        ;;
+      --start-cmd)
+        RAILPACK_ARGS+=("--start-cmd")
+        RAILPACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --start-cmd=*)
+        if [[ "$1" == "--start-cmd=*" ]]; then
+          RAILPACK_ARGS+=("--start-cmd" "${1#--start-cmd=}")
+        fi
+        shift 1
+        ;;
+      ---show-plan | --error-missing-start)
+        RAILPACK_ARGS+=("$1")
+        shift 1
+        ;;
+      *)
+        continue
+        ;;
+    esac
+  done
+
+  eval "$(config_export app "$APP" --merged)"
+
   # shellcheck disable=SC2086
-  if ! railpack build "${ARG_ARRAY[@]}" $RAILPACK_ARGS --name "$IMAGE-build" "$SOURCECODE_WORK_DIR"; then
+  if ! railpack build "${RAILPACK_ARGS[@]}" --name "$IMAGE-build" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
   fi

From ae8eaa7e63e88c9f05569265c6ce39dc58c16176 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 22:59:49 -0500
Subject: [PATCH 138/427] refactor: filter out procfile first and include
 --no-cache in DOCKER_ARGS

---
 plugins/builder-nixpacks/builder-build | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index d2eede6a3..d1ab7340e 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -27,15 +27,16 @@ trigger-builder-nixpacks-builder-build() {
 
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
-  no_cache="$(fn-builder-nixpacks-computed-no-cache "$APP")"
-  NIXPACKS_ARGS=""
-  if [[ "$no_cache" == "true" ]]; then
-    NIXPACKS_ARGS="$NIXPACKS_ARGS --no-cache"
+  if [[ -f "$SOURCECODE_WORK_DIR/Procfile" ]]; then
+    if procfile-util exists --process-type release; then
+      procfile-util delete --process-type release
+    fi
   fi
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
+  [[ "$(fn-builder-nixpacks-computed-no-cache "$APP")" == "true" ]] && DOCKER_ARGS+=" --no-cache"
 
   DOCKER_ARGS=" $DOCKER_ARGS "
   eval set -- "$DOCKER_ARGS"
@@ -165,12 +166,6 @@ trigger-builder-nixpacks-builder-build() {
 
   eval "$(config_export app "$APP" --merged)"
 
-  if [[ -f "$SOURCECODE_WORK_DIR/Procfile" ]]; then
-    if procfile-util exists --process-type release; then
-      procfile-util delete --process-type release
-    fi
-  fi
-
   # shellcheck disable=SC2086
   if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"

From 210128f5f25baf494c51b5c076e2552e8dfc66b3 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:13:57 -0500
Subject: [PATCH 139/427] chore: simplify logic for flags without multiple
 methods of being set

---
 plugins/builder-railpack/builder-build | 30 +++++++-------------------
 1 file changed, 8 insertions(+), 22 deletions(-)

diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 5d4c8faf0..68d2698f3 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -49,11 +49,7 @@ trigger-builder-railpack-builder-build() {
         shift 2
         ;;
       --platform=*)
-        if [[ "$1" == "--buildpack=*" ]]; then
-          RAILPACK_ARGS+=("--platform" "${1#--platform=}")
-        elif [[ "$1" == "--platform=*" ]]; then
-          RAILPACK_ARGS+=("--platform" "${1#--platform=}")
-        fi
+        RAILPACK_ARGS+=("--platform" "${1#--platform=}")
         shift 1
         ;;
       --progress)
@@ -62,9 +58,7 @@ trigger-builder-railpack-builder-build() {
         shift 2
         ;;
       --progress=*)
-        if [[ "$1" == "--progress=*" ]]; then
-          RAILPACK_ARGS+=("--progress" "${1#--progress=}")
-        fi
+        RAILPACK_ARGS+=("--progress" "${1#--progress=}")
         shift 1
         ;;
       --cache-key)
@@ -73,9 +67,7 @@ trigger-builder-railpack-builder-build() {
         shift 2
         ;;
       --cache-key=*)
-        if [[ "$1" == "--cache-key=*" ]]; then
-          RAILPACK_ARGS+=("--cache-key" "${1#--cache-key=}")
-        fi
+        RAILPACK_ARGS+=("--cache-key" "${1#--cache-key=}")
         shift 1
         ;;
       -e | --env)
@@ -86,8 +78,8 @@ trigger-builder-railpack-builder-build() {
       -e=* | --env=*)
         if [[ "$1" == "--env=*" ]]; then
           RAILPACK_ARGS+=("--env" "${1#--env=}")
-        elif [[ "$1" == "--env=*" ]]; then
-          RAILPACK_ARGS+=("--env" "${1#--env=}")
+        elif [[ "$1" == "--e=*" ]]; then
+          RAILPACK_ARGS+=("--env" "${1#-e=}")
         fi
         shift 1
         ;;
@@ -97,9 +89,7 @@ trigger-builder-railpack-builder-build() {
         shift 2
         ;;
       --previous=*)
-        if [[ "$1" == "--previous=*" ]]; then
-          RAILPACK_ARGS+=("--previous" "${1#--previous=}")
-        fi
+        RAILPACK_ARGS+=("--previous" "${1#--previous=}")
         shift 1
         ;;
       --build-cmd)
@@ -108,9 +98,7 @@ trigger-builder-railpack-builder-build() {
         shift 2
         ;;
       --build-cmd=*)
-        if [[ "$1" == "--build-cmd=*" ]]; then
-          RAILPACK_ARGS+=("--build-cmd" "${1#--build-cmd=}")
-        fi
+        RAILPACK_ARGS+=("--build-cmd" "${1#--build-cmd=}")
         shift 1
         ;;
       --start-cmd)
@@ -119,9 +107,7 @@ trigger-builder-railpack-builder-build() {
         shift 2
         ;;
       --start-cmd=*)
-        if [[ "$1" == "--start-cmd=*" ]]; then
-          RAILPACK_ARGS+=("--start-cmd" "${1#--start-cmd=}")
-        fi
+        RAILPACK_ARGS+=("--start-cmd" "${1#--start-cmd=}")
         shift 1
         ;;
       ---show-plan | --error-missing-start)

From 2a702175b55d490fe0e6a1ea8e7b097eb6bc7b20 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:17:48 -0500
Subject: [PATCH 140/427] feat: filter out unsupported build arguments with
 docker build

While this will require future updates if docker  supports new build arguments, it also ensures builds safely consume arguments from other plugins.
---
 plugins/builder-dockerfile/builder-build | 215 ++++++++++++++++++++++-
 1 file changed, 208 insertions(+), 7 deletions(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 08a0d5d10..22ed24709 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -17,7 +17,6 @@ trigger-builder-dockerfile-builder-build() {
   dokku_log_info1 "Building $APP from Dockerfile"
 
   local IMAGE=$(get_app_image_name "$APP")
-  local DOKKU_DOCKERFILE_CACHE_BUILD=$(config_get "$APP" "DOKKU_DOCKERFILE_CACHE_BUILD")
   local DOKKU_DOCKER_BUILD_OPTS=$(config_get "$APP" "DOKKU_DOCKER_BUILD_OPTS")
   local DOCKER_BUILD_LABEL_ARGS=("--label=dokku" "--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=dockerfile" "--label=com.dokku.app-name=$APP")
 
@@ -34,17 +33,219 @@ trigger-builder-dockerfile-builder-build() {
   fi
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
-  [[ "$DOKKU_DOCKERFILE_CACHE_BUILD" == "false" ]] && DOKKU_DOCKER_BUILD_OPTS="$DOKKU_DOCKER_BUILD_OPTS --no-cache"
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
+  DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
+  [[ "$(config_get "$APP" "DOKKU_DOCKERFILE_CACHE_BUILD")" == "false" ]] && DOCKER_ARGS+=" --no-cache"
 
-  # strip --link, --volume and -v args from DOCKER_ARGS
-  local DOCKER_ARGS=$(sed -e "s/^--link=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--link[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume=[[:graph:]]\+[[:blank:]]\?//g" -e "s/^--volume[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" -e "s/^-v[[:blank:]]\?[[:graph:]]\+[[:blank:]]\?//g" <<<"$DOCKER_ARGS")
-  declare -a ARG_ARRAY
-  eval "ARG_ARRAY=($DOCKER_ARGS)"
+
+  DOCKER_ARGS=" $DOCKER_ARGS "
+  eval set -- "$DOCKER_ARGS"
+
+  declare -a DOCKERFILE_ARGS
+  while true; do
+    case "$1" in
+      --add-host)
+        DOCKERFILE_ARGS+=("--add-host")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --add-host=*)
+        DOCKERFILE_ARGS+=("--add-host" "${1#--add-host=}")
+        shift 1
+        ;;
+      --allow)
+        DOCKERFILE_ARGS+=("--allow")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --allow=*)
+        DOCKERFILE_ARGS+=("--allow" "${1#--allow=}")
+        shift 1
+        ;;
+      --annotation)
+        DOCKERFILE_ARGS+=("--annotation")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --annotation=*)
+        DOCKERFILE_ARGS+=("--annotation" "${1#--annotation=}")
+        shift 1
+        ;;
+      --attest)
+        DOCKERFILE_ARGS+=("--attest")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --attest=*)
+        DOCKERFILE_ARGS+=("--attest" "${1#--attest=}")
+        shift 1
+        ;;
+      --build-arg)
+        DOCKERFILE_ARGS+=("--build-arg")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --build-arg=*)
+        DOCKERFILE_ARGS+=("--build-arg" "${1#--build-arg=}")
+        shift 1
+        ;;
+      --builder)
+        DOCKERFILE_ARGS+=("--builder")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --builder=*)
+        DOCKERFILE_ARGS+=("--builder" "${1#--builder=}")
+        shift 1
+        ;;
+      --cache-from)
+        DOCKERFILE_ARGS+=("--cache-from")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-from=*)
+        DOCKERFILE_ARGS+=("--cache-from" "${1#--cache-from=}")
+        shift 1
+        ;;
+      --cache-to)
+        DOCKERFILE_ARGS+=("--cache-to")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-to=*)
+        DOCKERFILE_ARGS+=("--cache-to" "${1#--cache-to=}")
+        shift 1
+        ;;
+      --call)
+        DOCKERFILE_ARGS+=("--env")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --env=*)
+        DOCKERFILE_ARGS+=("--env" "${1#--env=}")
+        shift 1
+        ;;
+      --cgroup-parent)
+        DOCKERFILE_ARGS+=("--cgroup-parent")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --cgroup-parent=*)
+        DOCKERFILE_ARGS+=("--cgroup-parent" "${1#--cgroup-parent=}")
+        shift 1
+        ;;
+      --label)
+        DOCKERFILE_ARGS+=("--label")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --label=*)
+        DOCKERFILE_ARGS+=("--label" "${1#--label=}")
+        shift 1
+        ;;
+      --network)
+        DOCKERFILE_ARGS+=("--network")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --network=*)
+        DOCKERFILE_ARGS+=("--network" "${1#--network=}")
+        shift 1
+        ;;
+      --platform)
+        DOCKERFILE_ARGS+=("--platform")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --platform=*)
+        DOCKERFILE_ARGS+=("--platform" "${1#--platform=}")
+        shift 1
+        ;;
+      --progress)
+        DOCKERFILE_ARGS+=("--progress")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --progress=*)
+        DOCKERFILE_ARGS+=("--progress" "${1#--progress=}")
+        shift 1
+        ;;
+      --provenance)
+        DOCKERFILE_ARGS+=("--provenance")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --provenance=*)
+        DOCKERFILE_ARGS+=("--provenance" "${1#--provenance=}")
+        shift 1
+        ;;
+      --sbom)
+        DOCKERFILE_ARGS+=("--sbom")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --sbom=*)
+        DOCKERFILE_ARGS+=("--sbom" "${1#--sbom=}")
+        shift 1
+        ;;
+      --secret)
+        DOCKERFILE_ARGS+=("--secret")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --secret=*)
+        DOCKERFILE_ARGS+=("--secret" "${1#--secret=}")
+        shift 1
+        ;;
+      --shm-size)
+        DOCKERFILE_ARGS+=("--shm-size")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --shm-size=*)
+        DOCKERFILE_ARGS+=("--shm-size" "${1#--shm-size=}")
+        shift 1
+        ;;
+      --ssh)
+        DOCKERFILE_ARGS+=("--platform")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --ssh=*)
+        DOCKERFILE_ARGS+=("--ssh" "${1#--ssh=}")
+        shift 1
+        ;;
+      --target)
+        DOCKERFILE_ARGS+=("--target")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --target=*)
+        DOCKERFILE_ARGS+=("--target" "${1#--target=}")
+        shift 1
+        ;;
+      --ulimit)
+        DOCKERFILE_ARGS+=("--tag")
+        DOCKERFILE_ARGS+=("$2")
+        shift 2
+        ;;
+      --tag=*)
+        DOCKERFILE_ARGS+=("--tag" "${1#--tag=}")
+        shift 1
+        ;;
+      --check | -D | --debug | --no-cache)
+        DOCKERFILE_ARGS+=("$1")
+        shift 1
+        ;;
+      *)
+        continue
+        ;;
+    esac
+  done
 
   eval "$(config_export app "$APP")"
-  "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS "${ARG_ARRAY[@]}" ${DOKKU_DOCKER_BUILD_OPTS} -t $IMAGE .
+  "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${DOCKERFILE_ARGS[@]}" ${DOKKU_DOCKER_BUILD_OPTS} --tag $IMAGE .
 
   plugn trigger ports-set-detected "$APP" "$(fn-builder-dockerfile-get-detect-port-map "$APP" "$IMAGE" "$SOURCECODE_WORK_DIR/Dockerfile")"
   if fn-plugn-trigger-exists "post-build-dockerfile"; then

From 6325dd6d7bf7a0d8498cad8a82f5f78ee656d3c6 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:21:41 -0500
Subject: [PATCH 141/427] docs: add missing link to 0.36.0 migration guide

---
 docs/getting-started/upgrading/index.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/getting-started/upgrading/index.md b/docs/getting-started/upgrading/index.md
index 7effb6010..166bea94b 100644
--- a/docs/getting-started/upgrading/index.md
+++ b/docs/getting-started/upgrading/index.md
@@ -18,6 +18,7 @@ Docker releases updates periodically to their engine. We recommend reading their
 
 Before upgrading, check the migration guides to get comfortable with new features and prepare your deployment to be upgraded.
 
+- [Upgrading to 0.36](/docs/appendices/0.36.0-migration-guide.md)
 - [Upgrading to 0.35](/docs/appendices/0.35.0-migration-guide.md)
 - [Upgrading to 0.34](/docs/appendices/0.34.0-migration-guide.md)
 - [Upgrading to 0.33](/docs/appendices/0.33.0-migration-guide.md)

From 9b75cc39b1ebb527f7fa81d5c69cbaf51718be33 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:27:22 -0500
Subject: [PATCH 142/427] refactor: remove support for
 DOKKU_DOCKERFILE_CACHE_BUILD

This replicates the docker-options functionality.
---
 docs/appendices/0.37.0-migration-guide.md   | 5 +++++
 docs/configuration/environment-variables.md | 1 -
 docs/deployment/builders/dockerfiles.md     | 2 +-
 docs/getting-started/upgrading/index.md     | 1 +
 plugins/builder-dockerfile/builder-build    | 1 -
 5 files changed, 7 insertions(+), 3 deletions(-)
 create mode 100644 docs/appendices/0.37.0-migration-guide.md

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
new file mode 100644
index 000000000..c7a07eee8
--- /dev/null
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -0,0 +1,5 @@
+# 0.36.0 Migration Guide
+
+## Removals
+
+- Support for the `DOKKU_DOCKERFILE_CACHE_BUILD` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
\ No newline at end of file
diff --git a/docs/configuration/environment-variables.md b/docs/configuration/environment-variables.md
index d2c21fd50..dd805bd0f 100644
--- a/docs/configuration/environment-variables.md
+++ b/docs/configuration/environment-variables.md
@@ -110,7 +110,6 @@ The following config variables have special meanings and can be set in a variety
 | `DOKKU_DEFAULT_CHECKS_WAIT`    | `10`                            | `dokku config:set`                                                                                                                               | If no user-defined checks are specified - or if the process being checked is not a `web` process - this is the period of time Dokku will wait before checking that a container is still running. |
 | `DOKKU_DISABLE_PROXY`          | none                            | `dokku proxy:disable` <br /> `dokku proxy:enable`                                                                                                | Disables the proxy in front of your application, resulting in publicly routing the docker container. |
 | `DOKKU_DISABLE_APP_AUTOCREATION` | none                            | `dokku config:set`                                                                                                                               | Disables automatic creation of a non-existent app on deploy. |
-| `DOKKU_DOCKERFILE_CACHE_BUILD` | none                            | `dokku config:set`                                                                                                                               | |
 | `DOKKU_DOCKERFILE_START_CMD`   | none                            | `dokku config:set`                                                                                                                               | |
 | `DOKKU_PARALLEL_ARGUMENTS`.    | none                            | `dokku config:set`                                                                                                                               | Allows passing custom arguments to parallel for `ps:*all` commands |
 | `DOKKU_PROXY_PORT`             | automatically assigned          | `/etc/environment` <br /> `~dokku/.dokkurc` <br /> `~dokku/.dokkurc/*` <br /> `dokku config:set`                                                 | |
diff --git a/docs/deployment/builders/dockerfiles.md b/docs/deployment/builders/dockerfiles.md
index 64b3c4726..a7a49b080 100644
--- a/docs/deployment/builders/dockerfiles.md
+++ b/docs/deployment/builders/dockerfiles.md
@@ -199,7 +199,7 @@ dokku config:set node-js-app DOKKU_DOCKERFILE_START_CMD="--harmony server.js"
 
 To tell Docker what to run.
 
-Setting `$DOKKU_DOCKERFILE_CACHE_BUILD` to `true` or `false` will enable or disable Docker's image layer cache. Lastly, for more granular build control, you may also pass any `docker build` option to `docker`, by setting `$DOKKU_DOCKER_BUILD_OPTS`.
+For more granular build control, you may also pass any `docker build` option to `docker`, by setting `$DOKKU_DOCKER_BUILD_OPTS`.
 
 ### Procfiles and multiple processes
 
diff --git a/docs/getting-started/upgrading/index.md b/docs/getting-started/upgrading/index.md
index 166bea94b..7c3ae989d 100644
--- a/docs/getting-started/upgrading/index.md
+++ b/docs/getting-started/upgrading/index.md
@@ -18,6 +18,7 @@ Docker releases updates periodically to their engine. We recommend reading their
 
 Before upgrading, check the migration guides to get comfortable with new features and prepare your deployment to be upgraded.
 
+- [Upgrading to 0.37](/docs/appendices/0.37.0-migration-guide.md)
 - [Upgrading to 0.36](/docs/appendices/0.36.0-migration-guide.md)
 - [Upgrading to 0.35](/docs/appendices/0.35.0-migration-guide.md)
 - [Upgrading to 0.34](/docs/appendices/0.34.0-migration-guide.md)
diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 22ed24709..5916461f3 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -36,7 +36,6 @@ trigger-builder-dockerfile-builder-build() {
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
-  [[ "$(config_get "$APP" "DOKKU_DOCKERFILE_CACHE_BUILD")" == "false" ]] && DOCKER_ARGS+=" --no-cache"
 
 
   DOCKER_ARGS=" $DOCKER_ARGS "

From 50b2836e52ac6c902c1d0116bf94b2b68cf0ef40 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:28:44 -0500
Subject: [PATCH 143/427] refactor: remove support for DOKKU_DOCKER_BUILD_OPTS

This replicates the docker-options functionality.
---
 docs/appendices/0.37.0-migration-guide.md | 3 ++-
 docs/deployment/builders/dockerfiles.md   | 2 --
 plugins/builder-dockerfile/builder-build  | 3 +--
 3 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
index c7a07eee8..bc7943389 100644
--- a/docs/appendices/0.37.0-migration-guide.md
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -2,4 +2,5 @@
 
 ## Removals
 
-- Support for the `DOKKU_DOCKERFILE_CACHE_BUILD` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
\ No newline at end of file
+- Support for the `DOKKU_DOCKERFILE_CACHE_BUILD` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
+- Support for the `DOKKU_DOCKER_BUILD_OPTS` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
diff --git a/docs/deployment/builders/dockerfiles.md b/docs/deployment/builders/dockerfiles.md
index a7a49b080..ec1b7b5ee 100644
--- a/docs/deployment/builders/dockerfiles.md
+++ b/docs/deployment/builders/dockerfiles.md
@@ -199,8 +199,6 @@ dokku config:set node-js-app DOKKU_DOCKERFILE_START_CMD="--harmony server.js"
 
 To tell Docker what to run.
 
-For more granular build control, you may also pass any `docker build` option to `docker`, by setting `$DOKKU_DOCKER_BUILD_OPTS`.
-
 ### Procfiles and multiple processes
 
 > [!IMPORTANT]
diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 5916461f3..56852547c 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -17,7 +17,6 @@ trigger-builder-dockerfile-builder-build() {
   dokku_log_info1 "Building $APP from Dockerfile"
 
   local IMAGE=$(get_app_image_name "$APP")
-  local DOKKU_DOCKER_BUILD_OPTS=$(config_get "$APP" "DOKKU_DOCKER_BUILD_OPTS")
   local DOCKER_BUILD_LABEL_ARGS=("--label=dokku" "--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=dockerfile" "--label=com.dokku.app-name=$APP")
 
   pushd "$SOURCECODE_WORK_DIR" &>/dev/null
@@ -244,7 +243,7 @@ trigger-builder-dockerfile-builder-build() {
   done
 
   eval "$(config_export app "$APP")"
-  "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${DOCKERFILE_ARGS[@]}" ${DOKKU_DOCKER_BUILD_OPTS} --tag $IMAGE .
+  "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${DOCKERFILE_ARGS[@]}" --tag $IMAGE .
 
   plugn trigger ports-set-detected "$APP" "$(fn-builder-dockerfile-get-detect-port-map "$APP" "$IMAGE" "$SOURCECODE_WORK_DIR/Dockerfile")"
   if fn-plugn-trigger-exists "post-build-dockerfile"; then

From 93cf9cc1189d8d020d259d5dcd0d6957b72cec81 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:30:15 -0500
Subject: [PATCH 144/427] refactor: remove support for the nixpacks no-cache
 property

This replicates the docker-options functionality.
---
 docs/deployment/builders/nixpacks.md        | 38 +++------------------
 plugins/builder-nixpacks/builder-build      |  1 -
 plugins/builder-nixpacks/internal-functions | 26 --------------
 plugins/builder-nixpacks/subcommands/set    |  4 +--
 4 files changed, 6 insertions(+), 63 deletions(-)

diff --git a/docs/deployment/builders/nixpacks.md b/docs/deployment/builders/nixpacks.md
index 46559ca68..945b424c3 100644
--- a/docs/deployment/builders/nixpacks.md
+++ b/docs/deployment/builders/nixpacks.md
@@ -80,28 +80,10 @@ dokku builder-nixpacks:set --global nixpackstoml-path
 
 ### Disabling cache
 
-Cache is enabled by default, but can be disabled by setting the `no-cache` property to `true`:
+Disable cache using the [docker-options] plugin:
 
 ```shell
-dokku builder-nixpacks:set node-js-app no-cache true
-```
-
-The default value may be set by passing an empty value for the option:
-
-```shell
-dokku builder-nixpacks:set node-js-app no-cache
-```
-
-The `no-cache` property can also be set globally. The global default is `false`, and the global value is used when no app-specific value is set.
-
-```shell
-dokku builder-nixpacks:set --global no-cache true
-```
-
-The default value may be set by passing an empty value for the option.
-
-```shell
-dokku builder-nixpacks:set --global no-cache
+dokku docker-options:add node-js-app build "--no-cache"
 ```
 
 ### Displaying builder-nixpacks reports for an app
@@ -117,23 +99,14 @@ dokku builder-nixpacks:report
        Builder-nixpacks computed nixpackstoml path: nixpacks2.toml
        Builder-nixpacks global nixpackstoml path:   nixpacks.toml
        Builder-nixpacks nixpackstoml path:          nixpacks2.toml
-       Builder-nixpacks computed no cache:          true
-       Builder-nixpacks global no cache:            false
-       Builder-nixpacks no cache:                   true
 =====> python-sample builder-nixpacks information
        Builder-nixpacks computed nixpackstoml path: nixpacks.toml
        Builder-nixpacks global nixpackstoml path:   nixpacks.toml
        Builder-nixpacks nixpackstoml path:
-       Builder-nixpacks computed no cache:          false
-       Builder-nixpacks global no cache:            false
-       Builder-nixpacks no cache:
 =====> ruby-sample builder-nixpacks information
        Builder-nixpacks computed nixpackstoml path: nixpacks.toml
        Builder-nixpacks global nixpackstoml path:   nixpacks.toml
        Builder-nixpacks nixpackstoml path:
-       Builder-nixpacks computed no cache:          false
-       Builder-nixpacks global no cache:            false
-       Builder-nixpacks no cache:
 ```
 
 You can run the command for a specific app also.
@@ -147,17 +120,14 @@ dokku builder-nixpacks:report node-js-app
        Builder-nixpacks computed nixpackstoml path: nixpacks2.toml
        Builder-nixpacks global nixpackstoml path:   nixpacks.toml
        Builder-nixpacks nixpackstoml path:          nixpacks2.toml
-       Builder-nixpacks computed no cache:          true
-       Builder-nixpacks global no cache:            false
-       Builder-nixpacks no cache:                   true
 ```
 
 You can pass flags which will output only the value of the specific information you want. For example:
 
 ```shell
-dokku builder-nixpacks:report node-js-app --builder-nixpacks-no-cache
+dokku builder-nixpacks:report node-js-app --builder-nixpacks-nixpackstoml-path
 ```
 
 ```
-true
+nixpacks2.toml
 ```
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index d1ab7340e..d7fa62820 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -36,7 +36,6 @@ trigger-builder-nixpacks-builder-build() {
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
-  [[ "$(fn-builder-nixpacks-computed-no-cache "$APP")" == "true" ]] && DOCKER_ARGS+=" --no-cache"
 
   DOCKER_ARGS=" $DOCKER_ARGS "
   eval set -- "$DOCKER_ARGS"
diff --git a/plugins/builder-nixpacks/internal-functions b/plugins/builder-nixpacks/internal-functions
index 582fc33fa..d2c60a133 100755
--- a/plugins/builder-nixpacks/internal-functions
+++ b/plugins/builder-nixpacks/internal-functions
@@ -38,9 +38,6 @@ cmd-builder-nixpacks-report-single() {
     "--builder-nixpacks-computed-nixpackstoml-path: $(fn-builder-nixpacks-computed-nixpackstoml-path "$APP")"
     "--builder-nixpacks-global-nixpackstoml-path: $(fn-builder-nixpacks-global-nixpackstoml-path "$APP")"
     "--builder-nixpacks-nixpackstoml-path: $(fn-builder-nixpacks-nixpackstoml-path "$APP")"
-    "--builder-nixpacks-computed-no-cache: $(fn-builder-nixpacks-computed-no-cache "$APP")"
-    "--builder-nixpacks-global-no-cache: $(fn-builder-nixpacks-global-no-cache "$APP")"
-    "--builder-nixpacks-no-cache: $(fn-builder-nixpacks-no-cache "$APP")"
   )
 
   if [[ -z "$INFO_FLAG" ]]; then
@@ -91,26 +88,3 @@ fn-builder-nixpacks-nixpackstoml-path() {
 
   fn-plugin-property-get "builder-nixpacks" "$APP" "nixpackstoml-path" ""
 }
-
-fn-builder-nixpacks-computed-no-cache() {
-  declare APP="$1"
-
-  file="$(fn-builder-nixpacks-no-cache "$APP")"
-  if [[ "$file" == "" ]]; then
-    file="$(fn-builder-nixpacks-global-no-cache "$APP")"
-  fi
-
-  echo "$file"
-}
-
-fn-builder-nixpacks-global-no-cache() {
-  declare APP="$1"
-
-  fn-plugin-property-get "builder-nixpacks" "--global" "no-cache" "false"
-}
-
-fn-builder-nixpacks-no-cache() {
-  declare APP="$1"
-
-  fn-plugin-property-get "builder-nixpacks" "$APP" "no-cache" ""
-}
diff --git a/plugins/builder-nixpacks/subcommands/set b/plugins/builder-nixpacks/subcommands/set
index 711b60d72..de7d46513 100755
--- a/plugins/builder-nixpacks/subcommands/set
+++ b/plugins/builder-nixpacks/subcommands/set
@@ -9,13 +9,13 @@ cmd-builder-nixpacks-set() {
   declare cmd="builder-nixpacks:set"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP="$1" KEY="$2" VALUE="$3"
-  local VALID_KEYS=("nixpackstoml-path" "no-cache")
+  local VALID_KEYS=("nixpackstoml-path")
   [[ "$APP" == "--global" ]] || verify_app_name "$APP"
 
   [[ -z "$KEY" ]] && dokku_log_fail "No key specified"
 
   if ! fn-in-array "$KEY" "${VALID_KEYS[@]}"; then
-    dokku_log_fail "Invalid key specified, valid keys include: nixpackstoml-path, no-cache"
+    dokku_log_fail "Invalid key specified, valid keys include: nixpackstoml-path"
   fi
 
   if [[ -n "$VALUE" ]]; then

From 364eac374d80c7a3101aab1cf743c66cf06423ee Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:30:24 -0500
Subject: [PATCH 145/427] refactor: remove support for the railpack no-cache
 property

This replicates the docker-options functionality.
---
 docs/deployment/builders/railpack.md        | 38 +++------------------
 plugins/builder-railpack/builder-build      |  1 -
 plugins/builder-railpack/internal-functions | 26 --------------
 plugins/builder-railpack/subcommands/set    |  4 +--
 4 files changed, 6 insertions(+), 63 deletions(-)

diff --git a/docs/deployment/builders/railpack.md b/docs/deployment/builders/railpack.md
index dc0d634fb..cde329846 100644
--- a/docs/deployment/builders/railpack.md
+++ b/docs/deployment/builders/railpack.md
@@ -89,28 +89,10 @@ dokku builder-railpack:set --global railpackjson-path
 
 ### Disabling cache
 
-Cache is enabled by default, but can be disabled by setting the `no-cache` property to `true`:
+Disable cache using the [docker-options] plugin:
 
 ```shell
-dokku builder-railpack:set node-js-app no-cache true
-```
-
-The default value may be set by passing an empty value for the option:
-
-```shell
-dokku builder-railpack:set node-js-app no-cache
-```
-
-The `no-cache` property can also be set globally. The global default is `false`, and the global value is used when no app-specific value is set.
-
-```shell
-dokku builder-railpack:set --global no-cache true
-```
-
-The default value may be set by passing an empty value for the option.
-
-```shell
-dokku builder-railpack:set --global no-cache
+dokku docker-options:add node-js-app build "--no-cache"
 ```
 
 ### Displaying builder-railpack reports for an app
@@ -126,23 +108,14 @@ dokku builder-railpack:report
        Builder-railpack computed railpackjson path: railpack2.json
        Builder-railpack global railpackjson path:   railpack.json
        Builder-railpack railpackjson path:          railpack2.json
-       Builder-railpack computed no cache:          true
-       Builder-railpack global no cache:            false
-       Builder-railpack no cache:                   true
 =====> python-sample builder-railpack information
        Builder-railpack computed railpackjson path: railpack.json
        Builder-railpack global railpackjson path:   railpack.json
        Builder-railpack railpackjson path:
-       Builder-railpack computed no cache:          false
-       Builder-railpack global no cache:            false
-       Builder-railpack no cache:
 =====> ruby-sample builder-railpack information
        Builder-railpack computed railpackjson path: railpack.json
        Builder-railpack global railpackjson path:   railpack.json
        Builder-railpack railpackjson path:
-       Builder-railpack computed no cache:          false
-       Builder-railpack global no cache:            false
-       Builder-railpack no cache:
 ```
 
 You can run the command for a specific app also.
@@ -156,17 +129,14 @@ dokku builder-railpack:report node-js-app
        Builder-railpack computed railpackjson path: railpack2.json
        Builder-railpack global railpackjson path:   railpack.json
        Builder-railpack railpackjson path:          railpack2.json
-       Builder-railpack computed no cache:          true
-       Builder-railpack global no cache:            false
-       Builder-railpack no cache:                   true
 ```
 
 You can pass flags which will output only the value of the specific information you want. For example:
 
 ```shell
-dokku builder-railpack:report node-js-app --builder-railpack-no-cache
+dokku builder-railpack:report node-js-app --builder-railpack-railpackjson-path
 ```
 
 ```
-true
+railpack2.json
 ```
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 68d2698f3..afc5ff65f 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -35,7 +35,6 @@ trigger-builder-railpack-builder-build() {
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
-  [[ "$(fn-builder-railpack-computed-no-cache "$APP")" == "true" ]] && DOCKER_ARGS+=" --no-cache"
 
   DOCKER_ARGS=" $DOCKER_ARGS "
   eval set -- "$DOCKER_ARGS"
diff --git a/plugins/builder-railpack/internal-functions b/plugins/builder-railpack/internal-functions
index a405b2ed0..96dab71bc 100755
--- a/plugins/builder-railpack/internal-functions
+++ b/plugins/builder-railpack/internal-functions
@@ -38,9 +38,6 @@ cmd-builder-railpack-report-single() {
     "--builder-railpack-computed-railpackjson-path: $(fn-builder-railpack-computed-railpackjson-path "$APP")"
     "--builder-railpack-global-railpackjson-path: $(fn-builder-railpack-global-railpackjson-path "$APP")"
     "--builder-railpack-railpackjson-path: $(fn-builder-railpack-railpackjson-path "$APP")"
-    "--builder-railpack-computed-no-cache: $(fn-builder-railpack-computed-no-cache "$APP")"
-    "--builder-railpack-global-no-cache: $(fn-builder-railpack-global-no-cache "$APP")"
-    "--builder-railpack-no-cache: $(fn-builder-railpack-no-cache "$APP")"
   )
 
   if [[ -z "$INFO_FLAG" ]]; then
@@ -91,26 +88,3 @@ fn-builder-railpack-railpackjson-path() {
 
   fn-plugin-property-get "builder-railpack" "$APP" "railpackjson-path" ""
 }
-
-fn-builder-railpack-computed-no-cache() {
-  declare APP="$1"
-
-  file="$(fn-builder-railpack-no-cache "$APP")"
-  if [[ "$file" == "" ]]; then
-    file="$(fn-builder-railpack-global-no-cache "$APP")"
-  fi
-
-  echo "$file"
-}
-
-fn-builder-railpack-global-no-cache() {
-  declare APP="$1"
-
-  fn-plugin-property-get "builder-railpack" "--global" "no-cache" "false"
-}
-
-fn-builder-railpack-no-cache() {
-  declare APP="$1"
-
-  fn-plugin-property-get "builder-railpack" "$APP" "no-cache" ""
-}
diff --git a/plugins/builder-railpack/subcommands/set b/plugins/builder-railpack/subcommands/set
index 6001f0c6f..3ac35030d 100755
--- a/plugins/builder-railpack/subcommands/set
+++ b/plugins/builder-railpack/subcommands/set
@@ -9,13 +9,13 @@ cmd-builder-railpack-set() {
   declare cmd="builder-railpack:set"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP="$1" KEY="$2" VALUE="$3"
-  local VALID_KEYS=("railpackjson-path" "no-cache")
+  local VALID_KEYS=("railpackjson-path")
   [[ "$APP" == "--global" ]] || verify_app_name "$APP"
 
   [[ -z "$KEY" ]] && dokku_log_fail "No key specified"
 
   if ! fn-in-array "$KEY" "${VALID_KEYS[@]}"; then
-    dokku_log_fail "Invalid key specified, valid keys include: railpackjson-path, no-cache"
+    dokku_log_fail "Invalid key specified, valid keys include: railpackjson-path"
   fi
 
   if [[ -n "$VALUE" ]]; then

From 397c8f6d150dbd241458ba182336e75d30a54764 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:31:00 -0500
Subject: [PATCH 146/427] docs: add note on removal of nixpacks no-cache
 property

---
 docs/appendices/0.37.0-migration-guide.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
index bc7943389..cb33e72df 100644
--- a/docs/appendices/0.37.0-migration-guide.md
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -4,3 +4,4 @@
 
 - Support for the `DOKKU_DOCKERFILE_CACHE_BUILD` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
 - Support for the `DOKKU_DOCKER_BUILD_OPTS` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
+- Support for the `no-cache` nixpacks property has been removed. Use the `docker-options` plugin to set build arguments for your app instead.

From f1763bdaf5082386dfd40271658ad2ea2271aa0b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 15 Nov 2025 23:35:52 -0500
Subject: [PATCH 147/427] fix: correct lint issue

---
 plugins/builder-dockerfile/builder-build | 1 -
 1 file changed, 1 deletion(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 56852547c..47da0781f 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -36,7 +36,6 @@ trigger-builder-dockerfile-builder-build() {
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
 
-
   DOCKER_ARGS=" $DOCKER_ARGS "
   eval set -- "$DOCKER_ARGS"
 

From 3b35656ae9c55f27b1770dc739a54e7b7df809e4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 00:26:53 -0500
Subject: [PATCH 148/427] fix: shift the unknown arguments out

They should just be ignored.
---
 plugins/builder-dockerfile/builder-build | 1 +
 plugins/builder-nixpacks/builder-build   | 1 +
 plugins/builder-pack/builder-build       | 1 +
 plugins/builder-railpack/builder-build   | 1 +
 4 files changed, 4 insertions(+)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 47da0781f..86294c02c 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -236,6 +236,7 @@ trigger-builder-dockerfile-builder-build() {
         shift 1
         ;;
       *)
+        shift
         continue
         ;;
     esac
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index d7fa62820..beecc3a1a 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -158,6 +158,7 @@ trigger-builder-nixpacks-builder-build() {
         shift 1
         ;;
       *)
+        shift
         continue
         ;;
     esac
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index e3d3eef84..50daad571 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -123,6 +123,7 @@ trigger-builder-pack-builder-build() {
         shift 1
         ;;
       *)
+        shift
         continue
         ;;
     esac
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index afc5ff65f..133de71db 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -114,6 +114,7 @@ trigger-builder-railpack-builder-build() {
         shift 1
         ;;
       *)
+        shift
         continue
         ;;
     esac

From 9bda9e721fec7a2bebb42ed2cd7ebc5ad2b50ce3 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 00:30:35 -0500
Subject: [PATCH 149/427] feat: add support for flags with = signs

---
 plugins/builder-nixpacks/builder-build |  78 ++++++++++++-
 plugins/builder-pack/builder-build     | 153 ++++++++++++++++++++++++-
 2 files changed, 226 insertions(+), 5 deletions(-)

diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index beecc3a1a..7a5a5fc08 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -147,8 +147,82 @@ trigger-builder-nixpacks-builder-build() {
         fi
         shift 1
         ;;
-      --platform | --cache-key | --incremental-cache-image | --libs | --cache-from | --docker-host | --add-host | --docker-tls-verify)
-        # todo: additionally support --flag=value syntax
+      --platform)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --platform=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-key)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-key=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --incremental-cache-image)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --incremental-cache-image=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --libs)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --libs=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-from)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-from=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --docker-host)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --docker-host=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --add-host)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --add-host=*)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --docker-tls-verify)
+        NIXPACKS_ARGS+=("$1")
+        NIXPACKS_ARGS+=("$2")
+        shift 2
+        ;;
+      --docker-tls-verify=*)
         NIXPACKS_ARGS+=("$1")
         NIXPACKS_ARGS+=("$2")
         shift 2
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 50daad571..338d8144b 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -112,12 +112,159 @@ trigger-builder-pack-builder-build() {
         fi
         shift 1
         ;;
-      --cache | --cache-image | --creation-time | --env-file | --extension | --gid | --insecure-registry | --lifecycle-image | --network | --platform | --post-buildpack | --pre-buildpack | --previous-image | --pull-policy | --run-image | --uid | --workspace)
-        # todo: additionally support --flag=value syntax
-        PACK_ARGS+=("$1")
+      --cache)
+        PACK_ARGS+=("--cache")
         PACK_ARGS+=("$2")
         shift 2
         ;;
+      --cache=*)
+        PACK_ARGS+=("--cache" "${1#--cache=}")
+        shift 1
+        ;;
+      --cache-image)
+        PACK_ARGS+=("--cache-image")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --cache-image=*)
+        PACK_ARGS+=("--cache-image" "${1#--cache-image=}")
+        shift 1
+        ;;
+      --creation-time)
+        PACK_ARGS+=("--creation-time")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --creation-time=*)
+        PACK_ARGS+=("--creation-time" "${1#--creation-time=}")
+        shift 1
+        ;;
+      --env-file)
+        PACK_ARGS+=("--env-file")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --env-file=*)
+        PACK_ARGS+=("--env-file" "${1#--env-file=}")
+        shift 1
+        ;;
+      --extension)
+        PACK_ARGS+=("--extension")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --extension=*)
+        PACK_ARGS+=("--extension" "${1#--extension=}")
+        shift 1
+        ;;
+      --gid)
+        PACK_ARGS+=("--gid")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --gid=*)
+        PACK_ARGS+=("--gid" "${1#--gid=}")
+        shift 1
+        ;;
+      --insecure-registry)
+        PACK_ARGS+=("--insecure-registry")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --insecure-registry=*)
+        PACK_ARGS+=("--insecure-registry" "${1#--insecure-registry=}")
+        shift 1
+        ;;
+      --lifecycle-image)
+        PACK_ARGS+=("--lifecycle-image")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --lifecycle-image=*)
+        PACK_ARGS+=("--lifecycle-image" "${1#--lifecycle-image=}")
+        shift 1
+        ;;
+      --network)
+        PACK_ARGS+=("--network")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --network=*)
+        PACK_ARGS+=("--network" "${1#--network=}")
+        shift 1
+        ;;
+      --platform)
+        PACK_ARGS+=("--platform")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --platform=*)
+        PACK_ARGS+=("--platform" "${1#--platform=}")
+        shift 1
+        ;;
+      --post-buildpack)
+        PACK_ARGS+=("--post-buildpack")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --post-buildpack=*)
+        PACK_ARGS+=("--post-buildpack" "${1#--post-buildpack=}")
+        shift 1
+        ;;
+      --pre-buildpack)
+        PACK_ARGS+=("--pre-buildpack")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --pre-buildpack=*)
+        PACK_ARGS+=("--pre-buildpack" "${1#--pre-buildpack=}")
+        shift 1
+        ;;
+      --previous-image)
+        PACK_ARGS+=("--previous-image")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --previous-image=*)
+        PACK_ARGS+=("--previous-image" "${1#--previous-image=}")
+        shift 1
+        ;;
+      --pull-policy)
+        PACK_ARGS+=("--pull-policy")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --pull-policy=*)
+        PACK_ARGS+=("--pull-policy" "${1#--pull-policy=}")
+        shift 1
+        ;;
+      --run-image)
+        PACK_ARGS+=("--run-image")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --run-image=*)
+        PACK_ARGS+=("--run-image" "${1#--run-image=}")
+        shift 1
+        ;;
+      --uid)
+        PACK_ARGS+=("--uid")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --uid=*)
+        PACK_ARGS+=("--uid" "${1#--uid=}")
+        shift 1
+        ;;
+      --workspace)
+        PACK_ARGS+=("--workspace")
+        PACK_ARGS+=("$2")
+        shift 2
+        ;;
+      --workspace=*)
+        PACK_ARGS+=("--workspace" "${1#--workspace=}")
+        shift 1
+        ;;
       --clear-cache | --disable-system-buildpacks | --publish | --trust-builder | --trust-extra-buildpacks | --userns-host)
         PACK_ARGS+=("$1")
         shift 1

From 406a82de29ecd5994a351ccdf82912970ec1bf4d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 01:10:15 -0500
Subject: [PATCH 150/427] fix: use call instead of env

---
 plugins/builder-dockerfile/builder-build | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 86294c02c..68c7e8399 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -115,12 +115,12 @@ trigger-builder-dockerfile-builder-build() {
         shift 1
         ;;
       --call)
-        DOCKERFILE_ARGS+=("--env")
+        DOCKERFILE_ARGS+=("--call")
         DOCKERFILE_ARGS+=("$2")
         shift 2
         ;;
-      --env=*)
-        DOCKERFILE_ARGS+=("--env" "${1#--env=}")
+      --call=*)
+        DOCKERFILE_ARGS+=("--call" "${1#--call=}")
         shift 1
         ;;
       --cgroup-parent)

From 9411c4ddc1f1b785ac8e930bf7579d3292cd55f5 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 01:10:53 -0500
Subject: [PATCH 151/427] test: ensure the deploy succeeds and then check the
 output vs using grep

---
 tests/unit/config.bats | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/tests/unit/config.bats b/tests/unit/config.bats
index 1825feb12..e9bfb1fce 100644
--- a/tests/unit/config.bats
+++ b/tests/unit/config.bats
@@ -486,10 +486,15 @@ teardown() {
 
 @test "(config) global config (dockerfile)" {
   run deploy_app dockerfile
-  run /bin/bash -c "dokku run $TEST_APP env | grep -E '^global_test=true'"
   echo "output: $output"
   echo "status: $status"
   assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "global_test=true"
 }
 
 @test "(config) config:show" {

From 531bb205192661c3c8c17ed154222adf11e8827f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 01:11:09 -0500
Subject: [PATCH 152/427] tests: respect the globally specified default branch
 when running tests

---
 tests/test_deploy | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/tests/test_deploy b/tests/test_deploy
index 01ecbda18..651e16098 100755
--- a/tests/test_deploy
+++ b/tests/test_deploy
@@ -45,10 +45,11 @@ git add .
 
 [[ -x pre-commit ]] && ./pre-commit "$REMOTE" "$REPO"
 git commit -m 'initial commit'
+current_branch="$(git rev-parse --abbrev-ref HEAD)"
 if [[ "$SHOULD_FAIL" == true ]]; then
-  git push target "master:$BRANCH" && succeeded git-push
+  git push target "$current_branch:$BRANCH" && succeeded git-push
 else
-  git push target "master:$BRANCH" || failed git-push
+  git push target "$current_branch:$BRANCH" || failed git-push
 fi
 if [[ -x post-deploy ]]; then
   ./post-deploy "$REMOTE" "$REPO" || failed post-deploy

From a9127e3abd5929206e134566567eb74b3482e247 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 01:24:28 -0500
Subject: [PATCH 153/427] fix: correctly handle exiting the argument parsing
 loop

---
 plugins/builder-dockerfile/builder-build | 7 +++++--
 plugins/builder-nixpacks/builder-build   | 7 +++++--
 plugins/builder-pack/builder-build       | 7 +++++--
 plugins/builder-railpack/builder-build   | 7 +++++--
 4 files changed, 20 insertions(+), 8 deletions(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 68c7e8399..f8c8c46fa 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -236,8 +236,11 @@ trigger-builder-dockerfile-builder-build() {
         shift 1
         ;;
       *)
-        shift
-        continue
+        if [[ -n "$1" ]]; then
+          shift
+          continue
+        fi
+        break
         ;;
     esac
   done
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index 7a5a5fc08..d74d9ba3a 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -232,8 +232,11 @@ trigger-builder-nixpacks-builder-build() {
         shift 1
         ;;
       *)
-        shift
-        continue
+        if [[ -n "$1" ]]; then
+          shift
+          continue
+        fi
+        break
         ;;
     esac
   done
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 338d8144b..305d21514 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -270,8 +270,11 @@ trigger-builder-pack-builder-build() {
         shift 1
         ;;
       *)
-        shift
-        continue
+        if [[ -n "$1" ]]; then
+          shift
+          continue
+        fi
+        break
         ;;
     esac
   done
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 133de71db..3b7e7e6df 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -114,8 +114,11 @@ trigger-builder-railpack-builder-build() {
         shift 1
         ;;
       *)
-        shift
-        continue
+        if [[ -n "$1" ]]; then
+          shift
+          continue
+        fi
+        break
         ;;
     esac
   done

From 4da1fea274b0034049bf7b7e0ce8f67067db0c6c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 01:45:11 -0500
Subject: [PATCH 154/427] fix: use correct check for BUILDPACK_URL

Also fix lint issue
---
 plugins/builder-pack/builder-build | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 192ebb33c..ceb6380e1 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -65,7 +65,7 @@ trigger-builder-pack-builder-build() {
     esac
   done
 
-  if [ -z "$BUILDPACK_URL" ]; then
+  if [ -n "$BUILDPACK_URL" ]; then
     PACK_ARGS+=("--builder")
     PACK_ARGS+=("$BUILDPACK_URL")
   elif [ -f "$SOURCECODE_WORK_DIR/.buildpacks" ]; then
@@ -76,7 +76,7 @@ trigger-builder-pack-builder-build() {
 
       PACK_ARGS+=("--builder")
       PACK_ARGS+=("$buildpack")
-    done < "$SOURCECODE_WORK_DIR/.buildpacks"
+    done <"$SOURCECODE_WORK_DIR/.buildpacks"
   fi
 
   pack build "$IMAGE" --builder "$DOKKU_CNB_BUILDER" --path "$SOURCECODE_WORK_DIR" --default-process web "${PACK_ARGS[@]}" "${ENV_ARGS[@]}"

From 4eafd3b5b772379e38c1d3b3db0730673c7cd173 Mon Sep 17 00:00:00 2001
From: dragonhunt02 <jackhunt43@libero.it>
Date: Sat, 22 Mar 2025 22:01:00 +0000
Subject: [PATCH 155/427] feat: implement proxy container :label functionality

---
 plugins/caddy-vhosts/command-functions        | 11 +++
 .../caddy-vhosts/docker-args-process-deploy   | 10 +++
 plugins/caddy-vhosts/help-functions           |  1 +
 plugins/caddy-vhosts/subcommands/label        |  6 ++
 plugins/haproxy-vhosts/command-functions      | 11 +++
 .../haproxy-vhosts/docker-args-process-deploy | 10 +++
 plugins/haproxy-vhosts/help-functions         |  1 +
 plugins/haproxy-vhosts/subcommands/label      |  6 ++
 plugins/openresty-vhosts/command-functions    | 11 +++
 .../docker-args-process-deploy                | 10 +++
 plugins/openresty-vhosts/help-functions       |  1 +
 plugins/openresty-vhosts/subcommands/label    |  6 ++
 plugins/proxy/command-functions               | 84 +++++++++++++++++++
 plugins/proxy/functions                       | 77 +++++++++++++++++
 plugins/traefik-vhosts/command-functions      | 11 +++
 .../traefik-vhosts/docker-args-process-deploy | 10 +++
 plugins/traefik-vhosts/help-functions         |  1 +
 plugins/traefik-vhosts/subcommands/label      |  6 ++
 18 files changed, 273 insertions(+)
 create mode 100755 plugins/caddy-vhosts/subcommands/label
 create mode 100755 plugins/haproxy-vhosts/subcommands/label
 create mode 100755 plugins/openresty-vhosts/subcommands/label
 create mode 100755 plugins/proxy/command-functions
 create mode 100755 plugins/proxy/functions
 create mode 100755 plugins/traefik-vhosts/subcommands/label

diff --git a/plugins/caddy-vhosts/command-functions b/plugins/caddy-vhosts/command-functions
index 1f04357ff..e515e2820 100755
--- a/plugins/caddy-vhosts/command-functions
+++ b/plugins/caddy-vhosts/command-functions
@@ -1,9 +1,20 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/command-functions"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
+cmd-caddy-label() {
+  declare desc="set/unset/show container proxy labels"
+  declare cmd="caddy:label"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1"
+
+  set -- caddy "$@"
+  cmd-proxy-label "$@"
+}
+
 cmd-caddy-report() {
   declare desc="displays a caddy report for one or more apps"
   declare cmd="caddy:report"
diff --git a/plugins/caddy-vhosts/docker-args-process-deploy b/plugins/caddy-vhosts/docker-args-process-deploy
index 9dd1f61f1..1be3b7f3a 100755
--- a/plugins/caddy-vhosts/docker-args-process-deploy
+++ b/plugins/caddy-vhosts/docker-args-process-deploy
@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/functions"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
@@ -129,6 +130,15 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
     fi
   fi
 
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" caddy)
+  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
+
+  if [[ -f "$proxy_labels_file_path" ]]; then
+    local user_proxy_labels="$(<"$proxy_labels_file_path")"
+    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
+    output="$output $user_proxy_labels"
+  fi
+
   echo -n "$STDIN$output"
 }
 
diff --git a/plugins/caddy-vhosts/help-functions b/plugins/caddy-vhosts/help-functions
index 287ffed04..76b161ef3 100755
--- a/plugins/caddy-vhosts/help-functions
+++ b/plugins/caddy-vhosts/help-functions
@@ -30,6 +30,7 @@ fn-help-content() {
     caddy:report [<app>] [<flag>], Displays an caddy report for one or more apps
     caddy:set <app> <property> (<value>), Set or clear an caddy property for an app
     caddy:show-config <app>, Display caddy compose config
+    caddy:label <app> <show | set | unset> <property> (<value>), Show, set or clear a caddy label for an app
     caddy:start, Starts the caddy server
     caddy:stop, Stops the caddy server
 help_content
diff --git a/plugins/caddy-vhosts/subcommands/label b/plugins/caddy-vhosts/subcommands/label
new file mode 100755
index 000000000..2a5e0421b
--- /dev/null
+++ b/plugins/caddy-vhosts/subcommands/label
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/command-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-caddy-label "$@"
diff --git a/plugins/haproxy-vhosts/command-functions b/plugins/haproxy-vhosts/command-functions
index 481a6a682..f7ce1be91 100755
--- a/plugins/haproxy-vhosts/command-functions
+++ b/plugins/haproxy-vhosts/command-functions
@@ -1,9 +1,20 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/command-functions"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
+cmd-haproxy-label() {
+  declare desc="set/unset/show container proxy labels"
+  declare cmd="haproxy:label"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1"
+
+  set -- haproxy "$@"
+  cmd-proxy-label "$@"
+}
+
 cmd-haproxy-report() {
   declare desc="displays a haproxy report for one or more apps"
   declare cmd="haproxy:report"
diff --git a/plugins/haproxy-vhosts/docker-args-process-deploy b/plugins/haproxy-vhosts/docker-args-process-deploy
index 60577f9cf..e60931fc7 100755
--- a/plugins/haproxy-vhosts/docker-args-process-deploy
+++ b/plugins/haproxy-vhosts/docker-args-process-deploy
@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/functions"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
@@ -123,6 +124,15 @@ trigger-haproxy-vhosts-docker-args-process-deploy() {
     fi
   fi
 
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" haproxy)
+  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
+
+  if [[ -f "$proxy_labels_file_path" ]]; then
+    local user_proxy_labels="$(<"$proxy_labels_file_path")"
+    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
+    output="$output $user_proxy_labels"
+  fi
+
   echo -n "$STDIN$output"
 }
 
diff --git a/plugins/haproxy-vhosts/help-functions b/plugins/haproxy-vhosts/help-functions
index b28fd2b1f..1c7f86674 100755
--- a/plugins/haproxy-vhosts/help-functions
+++ b/plugins/haproxy-vhosts/help-functions
@@ -30,6 +30,7 @@ fn-help-content() {
     haproxy:report [<app>] [<flag>], Displays an haproxy report for one or more apps
     haproxy:set <app> <property> (<value>), Set or clear an haproxy property for an app
     haproxy:show-config <app>, Display haproxy compose config
+    haproxy:label <app> <show | set | unset> <property> (<value>), Show, set or clear a haproxy label for an app
     haproxy:start, Starts the haproxy server
     haproxy:stop, Stops the haproxy server
 help_content
diff --git a/plugins/haproxy-vhosts/subcommands/label b/plugins/haproxy-vhosts/subcommands/label
new file mode 100755
index 000000000..d52aa7b16
--- /dev/null
+++ b/plugins/haproxy-vhosts/subcommands/label
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/command-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-haproxy-label "$@"
diff --git a/plugins/openresty-vhosts/command-functions b/plugins/openresty-vhosts/command-functions
index 926839ff4..d9f6401c7 100755
--- a/plugins/openresty-vhosts/command-functions
+++ b/plugins/openresty-vhosts/command-functions
@@ -1,9 +1,20 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/command-functions"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
+cmd-openresty-label() {
+  declare desc="set/unset/show container proxy labels"
+  declare cmd="openresty:label"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1"
+
+  set -- openresty "$@"
+  cmd-proxy-label "$@"
+}
+
 cmd-openresty-report() {
   declare desc="displays a openresty report for one or more apps"
   declare cmd="openresty:report"
diff --git a/plugins/openresty-vhosts/docker-args-process-deploy b/plugins/openresty-vhosts/docker-args-process-deploy
index beefa73e3..6c116b2e2 100755
--- a/plugins/openresty-vhosts/docker-args-process-deploy
+++ b/plugins/openresty-vhosts/docker-args-process-deploy
@@ -2,6 +2,7 @@
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/functions"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/internal-functions"
 
 trigger-openresty-vhosts-docker-args-process-deploy() {
@@ -181,6 +182,15 @@ trigger-openresty-vhosts-docker-args-process-deploy() {
   value="$(fn-openresty-x-forwarded-ssl "$APP")"
   [[ -n "$value" ]] && output="$output '--label=openresty.x-forwarded-ssl=$value'"
 
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" openresty)
+  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
+
+  if [[ -f "$proxy_labels_file_path" ]]; then
+    local user_proxy_labels="$(<"$proxy_labels_file_path")"
+    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
+    output="$output $user_proxy_labels"
+  fi
+
   echo -n "$STDIN$output"
 }
 
diff --git a/plugins/openresty-vhosts/help-functions b/plugins/openresty-vhosts/help-functions
index d8fc19e7a..d8a8414fc 100755
--- a/plugins/openresty-vhosts/help-functions
+++ b/plugins/openresty-vhosts/help-functions
@@ -30,6 +30,7 @@ fn-help-content() {
     openresty:report [<app>] [<flag>], Displays an openresty report for one or more apps
     openresty:set <app> <property> (<value>), Set or clear an openresty property for an app
     openresty:show-config <app>, Display openresty compose config
+    openresty:label <app> <show | set | unset> <property> (<value>), Show, set or clear an openresty label for an app
     openresty:start, Starts the openresty server
     openresty:stop, Stops the openresty server
 help_content
diff --git a/plugins/openresty-vhosts/subcommands/label b/plugins/openresty-vhosts/subcommands/label
new file mode 100755
index 000000000..b1a49be45
--- /dev/null
+++ b/plugins/openresty-vhosts/subcommands/label
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/command-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-openresty-label "$@"
diff --git a/plugins/proxy/command-functions b/plugins/proxy/command-functions
new file mode 100755
index 000000000..d38158421
--- /dev/null
+++ b/plugins/proxy/command-functions
@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-proxy-label-show() {
+  declare desc="show a proxy label for an app"
+  declare cmd="proxy:label:show"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
+  shift 2
+
+  if [[ -n "$PASSED_LABEL_NAME" ]]; then
+    fn-proxy-show-label "$PROXY" "$APP" "$PASSED_LABEL_NAME"
+    return
+  fi
+
+  fn-proxy-display-labels "$PROXY" "$APP"
+  return 0
+}
+
+cmd-proxy-label-add() {
+  declare desc="adds container label to app for specified proxy"
+  declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3" PASSED_LABEL_VALUE="$4"
+  if [[ -z "$PASSED_LABEL_NAME" ]]; then
+    dokku_log_fail "Please specify a container label for the app"
+  fi
+
+  if [[ -z "$PASSED_LABEL_VALUE" ]]; then
+    dokku_log_fail "Please specify a value for the container label"
+  fi
+
+  local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
+  touch "$proxy_labels_file_path"
+  cmd-proxy-label-remove "$PROXY" "$APP" "$PASSED_LABEL_NAME" >/dev/null
+  echo "--label '${PASSED_LABEL_NAME}=${PASSED_LABEL_VALUE}' " >>"$proxy_labels_file_path"
+  local all_proxy_labels="$(<"$proxy_labels_file_path")"
+  echo -e "${all_proxy_labels}" | sed '/^$/d' | sort -u >"$proxy_labels_file_path"
+}
+
+cmd-proxy-label-remove() {
+  declare desc="removes container label from app for specified proxy"
+  declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
+
+  if [[ -z "$PASSED_LABEL_NAME" ]]; then
+    dokku_log_fail "Please specify a container label for the app"
+  fi
+
+  local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
+  if [[ ! -s "$proxy_labels_file_path" ]]; then
+    return
+  fi
+
+  local all_proxy_labels="$(<"$proxy_labels_file_path")"
+  local escaped_label_name="$(fn-proxy-escape-extended-sed "$PASSED_LABEL_NAME")"
+  local all_proxy_labels="$(echo -e "${all_proxy_labels}" | sed -E "s/^--label ['\"]${escaped_label_name}=.*\$//")"
+  echo -e "${all_proxy_labels}" | sed '/^$/d' | sort -u >"$proxy_labels_file_path"
+}
+
+cmd-proxy-label() {
+  declare desc="manage proxy labels for an app"
+  declare cmd="proxy:label"
+  shift 1 # the command comes from the upstream plugin
+  declare PROXY="$1" ACTION="$2" APP="$3" PASSED_LABEL_NAME="$4" PASSED_LABEL_VALUE="$5"
+
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  verify_app_name "$APP"
+
+  if [[ -n "$PASSED_LABEL_NAME" ]] && [[ ! "$PASSED_LABEL_NAME" =~ ^$PROXY ]]; then
+    dokku_log_fail "Please specify a valid $PROXY label name for the app"
+  fi
+
+  if [[ "$action" == "show" ]]; then
+    cmd-proxy-label-show "$PROXY" "$APP" "$PASSED_LABEL_NAME"
+    return 0
+  elif [[ "$ACTION" == "set" ]]; then
+    cmd-proxy-label-add "$PROXY" "$APP" "$PASSED_LABEL_NAME" "$PASSED_LABEL_VALUE"
+  elif [[ "$action" == "unset" ]]; then
+    cmd-proxy-label-remove "$PROXY" "$APP" "$PASSED_LABEL_NAME"
+  else
+    dokku_log_fail "Please specify a valid action ('set', 'unset' or 'show')"
+  fi
+}
diff --git a/plugins/proxy/functions b/plugins/proxy/functions
new file mode 100755
index 000000000..7a83e9677
--- /dev/null
+++ b/plugins/proxy/functions
@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+
+fn-proxy-escape-extended-sed() {
+  # Escaped delimiter is '/'
+  local input="$1"
+  echo "$input" | sed -E 's#[][()\.^$?*+{}|/]#\\&#g'
+}
+
+fn-proxy-report-label-overwrite() {
+  declare desc="overwrite proxy labels file with new labels"
+  declare LABELS="$1" PROXY_LABELS_FILE_PATH="$2"
+
+  if [[ -f "$PROXY_LABELS_FILE_PATH" ]]; then
+    local DONE=false
+    until $DONE; do
+      local line
+      read -r line || local DONE=true
+
+      [[ -z "$line" ]] && continue
+
+      case "$line" in
+        \#*)
+          continue
+          ;;
+
+        --label*)
+          local label_name="$(echo "$line" | sed -E "s/^--label ['\"]([^=]+)=.*/\1/")"
+          local escaped_label_name="$(fn-proxy-escape-extended-sed "$passed_label_name")"
+          local match="$(echo "$LABELS" | sed -E "s/.*--label ['\"]($escaped_label_name)=.*/\1/")"
+          if [[ -n "$match" ]]; then
+            dokku_log_warn "Dokku label \"$match\" will be overwritten by user-set proxy label."
+          fi
+          continue
+          ;;
+
+        *)
+          dokku_log_warn "Invalid line '$line' in proxy label file $PROXY_FILE_PATH"
+          ;;
+      esac
+    done <"$PROXY_LABELS_FILE_PATH"
+  fi
+}
+
+fn-proxy-get-labels-file-path() {
+  declare desc="return proxy labels config file path for specified proxy"
+  declare PROXY="$1" APP="$2"
+  local PROXY_FILE="${DOKKU_ROOT}/${APP}/PROXY_LABELS_${PROXY^^}"
+
+  echo "$PROXY_FILE"
+}
+
+fn-proxy-display-labels() {
+  declare desc="print user-set app container labels for specified proxy"
+  declare PROXY="$1" APP="$2"
+  local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
+  echo "${PROXY^} labels:"
+  sed -e 's/^/    /' "$proxy_labels_file_path"
+}
+
+fn-proxy-show-label() {
+  declare desc="print single user-set app container label for specified proxy"
+  declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
+
+  local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
+  if [[ ! -s "$proxy_labels_file_path" ]]; then
+    return
+  fi
+
+  local all_proxy_labels="$(<"$proxy_labels_file_path")"
+  local escaped_label_name="$(fn-proxy-escape-extended-sed "$passed_label_name")"
+  local proxy_label_value="$(echo -e "${all_proxy_labels}" | sed -E -n "s/^--label ['\"]${escaped_label_name}=(.*)['\"] \$/\1/p")"
+
+  echo "$proxy_label_value"
+}
diff --git a/plugins/traefik-vhosts/command-functions b/plugins/traefik-vhosts/command-functions
index 93f5429d5..5a9eb91ec 100755
--- a/plugins/traefik-vhosts/command-functions
+++ b/plugins/traefik-vhosts/command-functions
@@ -1,9 +1,20 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/command-functions"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
+cmd-traefik-label() {
+  declare desc="set/unset/show container proxy labels"
+  declare cmd="traefik:label"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1"
+
+  set -- traefik "$@"
+  cmd-proxy-label "$@"
+}
+
 cmd-traefik-report() {
   declare desc="displays a traefik report for one or more apps"
   declare cmd="traefik:report"
diff --git a/plugins/traefik-vhosts/docker-args-process-deploy b/plugins/traefik-vhosts/docker-args-process-deploy
index dfb8f075f..ea01d0c33 100755
--- a/plugins/traefik-vhosts/docker-args-process-deploy
+++ b/plugins/traefik-vhosts/docker-args-process-deploy
@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/proxy/functions"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
@@ -130,6 +131,15 @@ trigger-traefik-vhosts-docker-args-process-deploy() {
     fi
   fi
 
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" traefik)
+  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
+
+  if [[ -f "$proxy_labels_file_path" ]]; then
+    local user_proxy_labels="$(<"$proxy_labels_file_path")"
+    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
+    output="$output $user_proxy_labels"
+  fi
+
   echo -n "$STDIN$output"
 }
 
diff --git a/plugins/traefik-vhosts/help-functions b/plugins/traefik-vhosts/help-functions
index 22ec4c1a8..3ceb61000 100755
--- a/plugins/traefik-vhosts/help-functions
+++ b/plugins/traefik-vhosts/help-functions
@@ -30,6 +30,7 @@ fn-help-content() {
     traefik:report [<app>] [<flag>], Displays an traefik report for one or more apps
     traefik:set <app> <property> (<value>), Set or clear an traefik property for an app
     traefik:show-config <app>, Display traefik compose config
+    traefik:label <app> <show | set | unset> <property> (<value>), Show, set or clear a traefik label for an app
     traefik:start, Starts the traefik server
     traefik:stop, Stops the traefik server
 help_content
diff --git a/plugins/traefik-vhosts/subcommands/label b/plugins/traefik-vhosts/subcommands/label
new file mode 100755
index 000000000..719f47b8b
--- /dev/null
+++ b/plugins/traefik-vhosts/subcommands/label
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/command-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-traefik-label "$@"

From 12cc31427b4a3bfb7d8f47ecebad0735cd26018f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 16:30:56 -0500
Subject: [PATCH 156/427] refactor: split out label subcommands into distinct
 commands

---
 plugins/caddy-vhosts/command-functions     | 26 +++++++++---
 plugins/caddy-vhosts/commands              | 13 ++++++
 plugins/caddy-vhosts/subcommands/label     |  6 ---
 plugins/haproxy-vhosts/command-functions   | 26 +++++++++---
 plugins/haproxy-vhosts/commands            | 13 ++++++
 plugins/haproxy-vhosts/subcommands/label   |  6 ---
 plugins/openresty-vhosts/command-functions | 26 +++++++++---
 plugins/openresty-vhosts/commands          | 13 ++++++
 plugins/openresty-vhosts/subcommands/label |  6 ---
 plugins/proxy/command-functions            | 49 +++++++---------------
 plugins/traefik-vhosts/command-functions   | 26 +++++++++---
 plugins/traefik-vhosts/commands            | 13 ++++++
 plugins/traefik-vhosts/subcommands/label   |  6 ---
 13 files changed, 146 insertions(+), 83 deletions(-)
 delete mode 100755 plugins/caddy-vhosts/subcommands/label
 delete mode 100755 plugins/haproxy-vhosts/subcommands/label
 delete mode 100755 plugins/openresty-vhosts/subcommands/label
 delete mode 100755 plugins/traefik-vhosts/subcommands/label

diff --git a/plugins/caddy-vhosts/command-functions b/plugins/caddy-vhosts/command-functions
index e515e2820..c2ec92404 100755
--- a/plugins/caddy-vhosts/command-functions
+++ b/plugins/caddy-vhosts/command-functions
@@ -5,14 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-caddy-label() {
-  declare desc="set/unset/show container proxy labels"
-  declare cmd="caddy:label"
+cmd-caddy-label-add() {
+  declare desc="adds container label to app for specified proxy"
+  declare cmd="caddy:label:add"
   [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1"
 
-  set -- caddy "$@"
-  cmd-proxy-label "$@"
+  cmd-proxy-label-add "proxy:label:add" "caddy" "$@"
+}
+
+cmd-caddy-label-remove() {
+  declare desc="removes container label from app for specified proxy"
+  declare cmd="caddy:label:remove"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-remove "proxy:label:remove" "caddy" "$@"
+}
+
+cmd-caddy-label-show() {
+  declare desc="shows container labels for app for specified proxy"
+  declare cmd="caddy:label:show"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-show "proxy:label:show" "caddy" "$@"
 }
 
 cmd-caddy-report() {
diff --git a/plugins/caddy-vhosts/commands b/plugins/caddy-vhosts/commands
index 03e69b312..76a267f5a 100755
--- a/plugins/caddy-vhosts/commands
+++ b/plugins/caddy-vhosts/commands
@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 [[ " caddy:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/help-functions"
+source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/command-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
@@ -9,6 +10,18 @@ case "$1" in
     cmd-caddy-help "$@"
     ;;
 
+  caddy:label:add)
+    cmd-caddy-label-add "$@"
+    ;;
+
+  caddy:label:remove)
+    cmd-caddy-label-remove "$@"
+    ;;
+
+  caddy:label:show)
+    cmd-caddy-label-show "$@"
+    ;;
+
   *)
     exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
     ;;
diff --git a/plugins/caddy-vhosts/subcommands/label b/plugins/caddy-vhosts/subcommands/label
deleted file mode 100755
index 2a5e0421b..000000000
--- a/plugins/caddy-vhosts/subcommands/label
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/command-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-caddy-label "$@"
diff --git a/plugins/haproxy-vhosts/command-functions b/plugins/haproxy-vhosts/command-functions
index f7ce1be91..d7a4633c1 100755
--- a/plugins/haproxy-vhosts/command-functions
+++ b/plugins/haproxy-vhosts/command-functions
@@ -5,14 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-haproxy-label() {
-  declare desc="set/unset/show container proxy labels"
-  declare cmd="haproxy:label"
+cmd-haproxy-label-add() {
+  declare desc="adds container label to app for specified proxy"
+  declare cmd="haproxy:label:add"
   [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1"
 
-  set -- haproxy "$@"
-  cmd-proxy-label "$@"
+  cmd-proxy-label-add "proxy:label:add" "haproxy" "$@"
+}
+
+cmd-haproxy-label-remove() {
+  declare desc="removes container label from app for specified proxy"
+  declare cmd="haproxy:label:remove"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-remove "proxy:label:remove" "haproxy" "$@"
+}
+
+cmd-haproxy-label-show() {
+  declare desc="shows container labels for app for specified proxy"
+  declare cmd="haproxy:label:show"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-show "proxy:label:show" "haproxy" "$@"
 }
 
 cmd-haproxy-report() {
diff --git a/plugins/haproxy-vhosts/commands b/plugins/haproxy-vhosts/commands
index 945869e42..fc866b7b8 100755
--- a/plugins/haproxy-vhosts/commands
+++ b/plugins/haproxy-vhosts/commands
@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 [[ " haproxy:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/help-functions"
+source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/command-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
@@ -9,6 +10,18 @@ case "$1" in
     cmd-haproxy-help "$@"
     ;;
 
+  haproxy:label:add)
+    cmd-haproxy-label-add "$@"
+    ;;
+
+  haproxy:label:remove)
+    cmd-haproxy-label-remove "$@"
+    ;;
+
+  haproxy:label:show)
+    cmd-haproxy-label-show "$@"
+    ;;
+
   *)
     exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
     ;;
diff --git a/plugins/haproxy-vhosts/subcommands/label b/plugins/haproxy-vhosts/subcommands/label
deleted file mode 100755
index d52aa7b16..000000000
--- a/plugins/haproxy-vhosts/subcommands/label
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/command-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-haproxy-label "$@"
diff --git a/plugins/openresty-vhosts/command-functions b/plugins/openresty-vhosts/command-functions
index d9f6401c7..ef887cde4 100755
--- a/plugins/openresty-vhosts/command-functions
+++ b/plugins/openresty-vhosts/command-functions
@@ -5,14 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-openresty-label() {
-  declare desc="set/unset/show container proxy labels"
-  declare cmd="openresty:label"
+cmd-openresty-label-add() {
+  declare desc="adds container label to app for specified proxy"
+  declare cmd="openresty:label:add"
   [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1"
 
-  set -- openresty "$@"
-  cmd-proxy-label "$@"
+  cmd-proxy-label-add "proxy:label:add" "openresty" "$@"
+}
+
+cmd-openresty-label-remove() {
+  declare desc="removes container label from app for specified proxy"
+  declare cmd="openresty:label:remove"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-remove "proxy:label:remove" "openresty" "$@"
+}
+
+cmd-openresty-label-show() {
+  declare desc="shows container labels for app for specified proxy"
+  declare cmd="openresty:label:show"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-show "proxy:label:show" "openresty" "$@"
 }
 
 cmd-openresty-report() {
diff --git a/plugins/openresty-vhosts/commands b/plugins/openresty-vhosts/commands
index b87c8aa14..6b76d4e68 100755
--- a/plugins/openresty-vhosts/commands
+++ b/plugins/openresty-vhosts/commands
@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 [[ " openresty:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/help-functions"
+source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/command-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
@@ -9,6 +10,18 @@ case "$1" in
     cmd-openresty-help "$@"
     ;;
 
+  openresty:label:add)
+    cmd-openresty-label-add "$@"
+    ;;
+
+  openresty:label:remove)
+    cmd-openresty-label-remove "$@"
+    ;;
+
+  openresty:label:show)
+    cmd-openresty-label-show "$@"
+    ;;
+
   *)
     exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
     ;;
diff --git a/plugins/openresty-vhosts/subcommands/label b/plugins/openresty-vhosts/subcommands/label
deleted file mode 100755
index b1a49be45..000000000
--- a/plugins/openresty-vhosts/subcommands/label
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/command-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-openresty-label "$@"
diff --git a/plugins/proxy/command-functions b/plugins/proxy/command-functions
index d38158421..2bc6e1170 100755
--- a/plugins/proxy/command-functions
+++ b/plugins/proxy/command-functions
@@ -11,25 +11,27 @@ cmd-proxy-label-show() {
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
   shift 2
 
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  verify_app_name "$APP"
+
   if [[ -n "$PASSED_LABEL_NAME" ]]; then
     fn-proxy-show-label "$PROXY" "$APP" "$PASSED_LABEL_NAME"
     return
   fi
 
   fn-proxy-display-labels "$PROXY" "$APP"
-  return 0
 }
 
 cmd-proxy-label-add() {
   declare desc="adds container label to app for specified proxy"
+  declare cmd="proxy:label:add"
+  [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3" PASSED_LABEL_VALUE="$4"
-  if [[ -z "$PASSED_LABEL_NAME" ]]; then
-    dokku_log_fail "Please specify a container label for the app"
-  fi
 
-  if [[ -z "$PASSED_LABEL_VALUE" ]]; then
-    dokku_log_fail "Please specify a value for the container label"
-  fi
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  [[ -z "$PASSED_LABEL_NAME" ]] && dokku_log_fail "Please specify a container label for the app"
+  [[ -z "$PASSED_LABEL_VALUE" ]] && dokku_log_fail "Please specify a value for the container label"
+  verify_app_name "$APP"
 
   local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
   touch "$proxy_labels_file_path"
@@ -41,11 +43,13 @@ cmd-proxy-label-add() {
 
 cmd-proxy-label-remove() {
   declare desc="removes container label from app for specified proxy"
+  declare cmd="proxy:label:remove"
+  [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
 
-  if [[ -z "$PASSED_LABEL_NAME" ]]; then
-    dokku_log_fail "Please specify a container label for the app"
-  fi
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  [[ -z "$PASSED_LABEL_NAME" ]] && dokku_log_fail "Please specify a container label for the app"
+  verify_app_name "$APP"
 
   local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
   if [[ ! -s "$proxy_labels_file_path" ]]; then
@@ -57,28 +61,3 @@ cmd-proxy-label-remove() {
   local all_proxy_labels="$(echo -e "${all_proxy_labels}" | sed -E "s/^--label ['\"]${escaped_label_name}=.*\$//")"
   echo -e "${all_proxy_labels}" | sed '/^$/d' | sort -u >"$proxy_labels_file_path"
 }
-
-cmd-proxy-label() {
-  declare desc="manage proxy labels for an app"
-  declare cmd="proxy:label"
-  shift 1 # the command comes from the upstream plugin
-  declare PROXY="$1" ACTION="$2" APP="$3" PASSED_LABEL_NAME="$4" PASSED_LABEL_VALUE="$5"
-
-  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
-  verify_app_name "$APP"
-
-  if [[ -n "$PASSED_LABEL_NAME" ]] && [[ ! "$PASSED_LABEL_NAME" =~ ^$PROXY ]]; then
-    dokku_log_fail "Please specify a valid $PROXY label name for the app"
-  fi
-
-  if [[ "$action" == "show" ]]; then
-    cmd-proxy-label-show "$PROXY" "$APP" "$PASSED_LABEL_NAME"
-    return 0
-  elif [[ "$ACTION" == "set" ]]; then
-    cmd-proxy-label-add "$PROXY" "$APP" "$PASSED_LABEL_NAME" "$PASSED_LABEL_VALUE"
-  elif [[ "$action" == "unset" ]]; then
-    cmd-proxy-label-remove "$PROXY" "$APP" "$PASSED_LABEL_NAME"
-  else
-    dokku_log_fail "Please specify a valid action ('set', 'unset' or 'show')"
-  fi
-}
diff --git a/plugins/traefik-vhosts/command-functions b/plugins/traefik-vhosts/command-functions
index 5a9eb91ec..32a3d9e75 100755
--- a/plugins/traefik-vhosts/command-functions
+++ b/plugins/traefik-vhosts/command-functions
@@ -5,14 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-traefik-label() {
-  declare desc="set/unset/show container proxy labels"
-  declare cmd="traefik:label"
+cmd-traefik-label-add() {
+  declare desc="adds container label to app for specified proxy"
+  declare cmd="traefik:label:add"
   [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1"
 
-  set -- traefik "$@"
-  cmd-proxy-label "$@"
+  cmd-proxy-label-add "proxy:label:add" "traefik" "$@"
+}
+
+cmd-traefik-label-remove() {
+  declare desc="removes container label from app for specified proxy"
+  declare cmd="traefik:label:remove"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-remove "proxy:label:remove" "traefik" "$@"
+}
+
+cmd-traefik-label-show() {
+  declare desc="shows container labels for app for specified proxy"
+  declare cmd="traefik:label:show"
+  [[ "$1" == "$cmd" ]] && shift 1
+
+  cmd-proxy-label-show "proxy:label:show" "traefik" "$@"
 }
 
 cmd-traefik-report() {
diff --git a/plugins/traefik-vhosts/commands b/plugins/traefik-vhosts/commands
index dfcc90d93..24a440dff 100755
--- a/plugins/traefik-vhosts/commands
+++ b/plugins/traefik-vhosts/commands
@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 [[ " traefik:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/help-functions"
+source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/command-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
@@ -9,6 +10,18 @@ case "$1" in
     cmd-traefik-help "$@"
     ;;
 
+  traefik:label:add)
+    cmd-traefik-label-add "$@"
+    ;;
+
+  traefik:label:remove)
+    cmd-traefik-label-remove "$@"
+    ;;
+
+  traefik:label:show)
+    cmd-traefik-label-show "$@"
+    ;;
+
   *)
     exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
     ;;
diff --git a/plugins/traefik-vhosts/subcommands/label b/plugins/traefik-vhosts/subcommands/label
deleted file mode 100755
index 719f47b8b..000000000
--- a/plugins/traefik-vhosts/subcommands/label
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/command-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-traefik-label "$@"

From edf9653ebf7dacd78305b828a55913cfb405432c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 16:32:13 -0500
Subject: [PATCH 157/427] fix: update help output for new subcommands

---
 plugins/caddy-vhosts/help-functions     | 4 +++-
 plugins/haproxy-vhosts/help-functions   | 4 +++-
 plugins/openresty-vhosts/help-functions | 4 +++-
 plugins/traefik-vhosts/help-functions   | 4 +++-
 4 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/plugins/caddy-vhosts/help-functions b/plugins/caddy-vhosts/help-functions
index 76b161ef3..6ea1b1f3e 100755
--- a/plugins/caddy-vhosts/help-functions
+++ b/plugins/caddy-vhosts/help-functions
@@ -30,7 +30,9 @@ fn-help-content() {
     caddy:report [<app>] [<flag>], Displays an caddy report for one or more apps
     caddy:set <app> <property> (<value>), Set or clear an caddy property for an app
     caddy:show-config <app>, Display caddy compose config
-    caddy:label <app> <show | set | unset> <property> (<value>), Show, set or clear a caddy label for an app
+    caddy:label:add <app> <label> <value>, Add a label to an caddy app
+    caddy:label:remove <app> <label>, Remove a label from an caddy app
+    caddy:label:show <app> [<label>], Show labels for an caddy app
     caddy:start, Starts the caddy server
     caddy:stop, Stops the caddy server
 help_content
diff --git a/plugins/haproxy-vhosts/help-functions b/plugins/haproxy-vhosts/help-functions
index 1c7f86674..b638cfe27 100755
--- a/plugins/haproxy-vhosts/help-functions
+++ b/plugins/haproxy-vhosts/help-functions
@@ -30,7 +30,9 @@ fn-help-content() {
     haproxy:report [<app>] [<flag>], Displays an haproxy report for one or more apps
     haproxy:set <app> <property> (<value>), Set or clear an haproxy property for an app
     haproxy:show-config <app>, Display haproxy compose config
-    haproxy:label <app> <show | set | unset> <property> (<value>), Show, set or clear a haproxy label for an app
+    haproxy:label:add <app> <label> <value>, Add a label to an haproxy app
+    haproxy:label:remove <app> <label>, Remove a label from an haproxy app
+    haproxy:label:show <app> [<label>], Show labels for an haproxy app
     haproxy:start, Starts the haproxy server
     haproxy:stop, Stops the haproxy server
 help_content
diff --git a/plugins/openresty-vhosts/help-functions b/plugins/openresty-vhosts/help-functions
index d8a8414fc..3e02a6029 100755
--- a/plugins/openresty-vhosts/help-functions
+++ b/plugins/openresty-vhosts/help-functions
@@ -30,7 +30,9 @@ fn-help-content() {
     openresty:report [<app>] [<flag>], Displays an openresty report for one or more apps
     openresty:set <app> <property> (<value>), Set or clear an openresty property for an app
     openresty:show-config <app>, Display openresty compose config
-    openresty:label <app> <show | set | unset> <property> (<value>), Show, set or clear an openresty label for an app
+    openresty:label:add <app> <label> <value>, Add a label to an openresty app
+    openresty:label:remove <app> <label>, Remove a label from an openresty app
+    openresty:label:show <app> [<label>], Show labels for an openresty app
     openresty:start, Starts the openresty server
     openresty:stop, Stops the openresty server
 help_content
diff --git a/plugins/traefik-vhosts/help-functions b/plugins/traefik-vhosts/help-functions
index 3ceb61000..92199caf1 100755
--- a/plugins/traefik-vhosts/help-functions
+++ b/plugins/traefik-vhosts/help-functions
@@ -30,7 +30,9 @@ fn-help-content() {
     traefik:report [<app>] [<flag>], Displays an traefik report for one or more apps
     traefik:set <app> <property> (<value>), Set or clear an traefik property for an app
     traefik:show-config <app>, Display traefik compose config
-    traefik:label <app> <show | set | unset> <property> (<value>), Show, set or clear a traefik label for an app
+    traefik:label:add <app> <label> <value>, Add a label to an traefik app
+    traefik:label:remove <app> <label>, Remove a label from an traefik app
+    traefik:label:show <app> [<label>], Show labels for an traefik app
     traefik:start, Starts the traefik server
     traefik:stop, Stops the traefik server
 help_content

From 003f6a5bd83ac1f7cad42e26c1a57ca22a76ca06 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 16:45:56 -0500
Subject: [PATCH 158/427] fix: remove not working method to change the caddy
 label-key

This was never actually used by caddy-docker-proxy so its better to just remove it.
---
 docs/appendices/0.37.0-migration-guide.md     |  1 +
 docs/networking/proxies/caddy.md              | 10 -------
 .../caddy-vhosts/docker-args-process-deploy   | 13 ++++-----
 plugins/caddy-vhosts/internal-functions       |  5 ----
 plugins/caddy-vhosts/subcommands/set          |  4 +--
 tests/unit/caddy.bats                         | 28 -------------------
 6 files changed, 9 insertions(+), 52 deletions(-)

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
index cb33e72df..6aa474994 100644
--- a/docs/appendices/0.37.0-migration-guide.md
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -5,3 +5,4 @@
 - Support for the `DOKKU_DOCKERFILE_CACHE_BUILD` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
 - Support for the `DOKKU_DOCKER_BUILD_OPTS` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
 - Support for the `no-cache` nixpacks property has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
+- Support for customizing the label-key for the caddy proxy has been removed. Always use `caddy.` as a prefix for your caddy directives.
diff --git a/docs/networking/proxies/caddy.md b/docs/networking/proxies/caddy.md
index 7edaa6cdf..b437d6a3f 100644
--- a/docs/networking/proxies/caddy.md
+++ b/docs/networking/proxies/caddy.md
@@ -117,16 +117,6 @@ dokku caddy:set --global log-level DEBUG
 
 After modifying,  the Caddy container will need to be restarted.
 
-### Changing the label key for the app
-
-The default label key for the app is `caddy`. This can be changed by setting the `label-key` property:
-
-```shell
-dokku caddy:set node-js-app label-key caddy_0
-```
-
-This will update the app's label key to `caddy_0`. The label key is used to identify the app in the Caddy configuration. If you change the label key, you will need to restart or rebuild the app to apply the updates.
-
 ### SSL Configuration
 
 The caddy plugin only supports automatic ssl certificates from its letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.
diff --git a/plugins/caddy-vhosts/docker-args-process-deploy b/plugins/caddy-vhosts/docker-args-process-deploy
index 1be3b7f3a..bfbc33cf3 100755
--- a/plugins/caddy-vhosts/docker-args-process-deploy
+++ b/plugins/caddy-vhosts/docker-args-process-deploy
@@ -9,7 +9,7 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
   declare desc="nginx-vhosts core-post-deploy plugin trigger"
   declare trigger="docker-args-process-deploy"
   declare APP="$1" IMAGE_SOURCE_TYPE="$2" IMAGE_TAG="$3" PROC_TYPE="$4" CONTAINER_INDEX="$5"
-  local app_domains caddy_domains is_app_listening letsencrypt_email output proxy_container_port proxy_host_port port_map proxy_scheme proxy_schemes scheme tls_internal label_key
+  local app_domains caddy_domains is_app_listening letsencrypt_email output proxy_container_port proxy_host_port port_map proxy_scheme proxy_schemes scheme tls_internal
   local proxy_container_http_port proxy_container_http_port_candidate proxy_host_http_port_candidate
   local proxy_container_https_port proxy_container_https_port_candidate proxy_host_https_port_candidate
   local STDIN=$(cat)
@@ -89,14 +89,13 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
   if [[ -n "$is_app_listening" ]] && [[ -n "$caddy_domains" ]]; then
     has_443_mapping=false
     tls_internal="$(fn-caddy-tls-internal)"
-    label_key="$(fn-caddy-label-key "$APP")"
     if [[ -n "$proxy_container_https_port" ]] || [[ -n "$proxy_container_https_port_candidate" ]]; then
       has_443_mapping=true
     fi
 
     ssl_warning_mapping="https:443"
     if [[ "$tls_internal" == "true" ]]; then
-      output="--label ${label_key}.tls=internal"
+      output="--label caddy.tls=internal"
       if [[ "$has_443_mapping" == "false" ]]; then
         ssl_warning_mapping="http:80"
         proxy_host_https_port_candidate="$proxy_host_http_port_candidate"
@@ -107,7 +106,7 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
 
     scheme="http"
     if [[ -n "$letsencrypt_email" ]] && [[ "$has_443_mapping" == "true" ]]; then
-      output="--label '${label_key}=${caddy_domains}'"
+      output="--label 'caddy=${caddy_domains}'"
       scheme="https"
       if [[ -z "$proxy_container_https_port" ]]; then
         warning_scheme="$(awk -F ':' '{ print $1 }' <<<"$ssl_warning_mapping")"
@@ -116,17 +115,17 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
         proxy_container_https_port="$proxy_container_https_port_candidate"
       fi
 
-      output="$output --label \"${label_key}.reverse_proxy={{ upstreams $proxy_container_https_port }}\""
+      output="$output --label \"caddy.reverse_proxy={{ upstreams $proxy_container_https_port }}\""
     elif [[ -n "$proxy_container_http_port" ]] || [[ -n "$proxy_container_http_port_candidate" ]]; then
       caddy_domains="${caddy_domains//, /:80, }"
-      output="--label '${label_key}=${caddy_domains}:80'"
+      output="--label 'caddy=${caddy_domains}:80'"
       if [[ -z "$proxy_container_http_port" ]]; then
         dokku_log_warn "Warning: http:80 port mapping not found"
         dokku_log_warn "Utilizing first http port mapping, http:$proxy_host_http_port_candidate:$proxy_container_http_port_candidate"
         proxy_container_http_port="$proxy_container_http_port_candidate"
       fi
 
-      output="$output --label \"${label_key}.reverse_proxy={{ upstreams $proxy_container_http_port }}\""
+      output="$output --label \"caddy.reverse_proxy={{ upstreams $proxy_container_http_port }}\""
     fi
   fi
 
diff --git a/plugins/caddy-vhosts/internal-functions b/plugins/caddy-vhosts/internal-functions
index 88758f732..86727e364 100755
--- a/plugins/caddy-vhosts/internal-functions
+++ b/plugins/caddy-vhosts/internal-functions
@@ -71,8 +71,3 @@ fn-caddy-tls-internal() {
   declare APP="$1"
   fn-plugin-property-get-default "caddy" "$APP" "tls-internal" "false"
 }
-
-fn-caddy-label-key() {
-  declare APP="$1"
-  fn-plugin-property-get-default "caddy" "$APP" "label-key" "caddy"
-}
diff --git a/plugins/caddy-vhosts/subcommands/set b/plugins/caddy-vhosts/subcommands/set
index 39dc3daa2..99954cf3e 100755
--- a/plugins/caddy-vhosts/subcommands/set
+++ b/plugins/caddy-vhosts/subcommands/set
@@ -9,13 +9,13 @@ cmd-caddy-set() {
   declare cmd="caddy:set"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP="$1" KEY="$2" VALUE="$3"
-  local VALID_KEYS=("image" "letsencrypt-email" "letsencrypt-server" "log-level" "polling-interval" "label-key" "tls-internal")
+  local VALID_KEYS=("image" "letsencrypt-email" "letsencrypt-server" "log-level" "polling-interval" "tls-internal")
   local GLOBAL_KEYS=("image" "letsencrypt-email" "letsencrypt-server" "log-level" "polling-interval")
 
   [[ -z "$KEY" ]] && dokku_log_fail "No key specified"
 
   if ! fn-in-array "$KEY" "${VALID_KEYS[@]}"; then
-    dokku_log_fail "Invalid key specified, valid keys include: image letsencrypt-email letsencrypt-server log-level polling-interval label-key tls-internal"
+    dokku_log_fail "Invalid key specified, valid keys include: image letsencrypt-email letsencrypt-server log-level polling-interval tls-internal"
   fi
 
   if ! fn-in-array "$KEY" "${GLOBAL_KEYS[@]}"; then
diff --git a/tests/unit/caddy.bats b/tests/unit/caddy.bats
index 0155cda71..d48d41196 100644
--- a/tests/unit/caddy.bats
+++ b/tests/unit/caddy.bats
@@ -50,34 +50,6 @@ teardown() {
   assert_output_contains "python/http.server"
 }
 
-@test "(caddy) custom label key" {
-  run /bin/bash -c "dokku builder-herokuish:set $TEST_APP allowed true"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku proxy:set $TEST_APP caddy"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku caddy:set $TEST_APP label-key caddy_0"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run deploy_app
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"caddy_0\" }}'"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-  assert_output "$TEST_APP.${DOKKU_DOMAIN}:80"
-}
-
 @test "(caddy) multiple domains" {
   run /bin/bash -c "dokku proxy:set $TEST_APP caddy"
   echo "output: $output"

From 3a52c7d0a839f1713e85383d5b18384ba6c651a4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 16:49:03 -0500
Subject: [PATCH 159/427] docs: add documentation for label management

---
 docs/networking/proxies/caddy.md     | 50 +++++++++++++++++++++++++++-
 docs/networking/proxies/haproxy.md   | 48 ++++++++++++++++++++++++++
 docs/networking/proxies/openresty.md | 48 ++++++++++++++++++++++++++
 docs/networking/proxies/traefik.md   | 48 ++++++++++++++++++++++++++
 4 files changed, 193 insertions(+), 1 deletion(-)

diff --git a/docs/networking/proxies/caddy.md b/docs/networking/proxies/caddy.md
index b437d6a3f..ed713f960 100644
--- a/docs/networking/proxies/caddy.md
+++ b/docs/networking/proxies/caddy.md
@@ -3,7 +3,7 @@
 > [!IMPORTANT]
 > New as of 0.28.0
 
-Dokku provides integration with the [Caddy](https://caddyserver.com/) proxy service by utilizing the Docker label-based integration implemented by Caddy.
+Dokku provides integration with the [Caddy](https://caddyserver.com/) proxy service by utilizing the Docker label-based integration implemented by [Caddy Docker Proxy](https://github.com/lucaslorentz/caddy-docker-proxy).
 
 ```
 caddy:report [<app>] [<flag>]            # Displays a caddy report for one or more apps
@@ -117,6 +117,54 @@ dokku caddy:set --global log-level DEBUG
 
 After modifying,  the Caddy container will need to be restarted.
 
+### Label Management
+
+The Caddy plugin allows you to add custom container labels to apps. These labels are injected into containers during deployment and can be used to configure Caddy behavior beyond what the plugin provides by default.
+
+Refer to the upstream [caddy-docker-proxy](https://github.com/lucaslorentz/caddy-docker-proxy) documentation for more information on what labels are available.
+
+#### Adding a label
+
+To add a custom container label to an app, use the `caddy:label:add` command:
+
+```shell
+dokku caddy:label:add node-js-app caddy.directive value
+```
+
+This will add the label `caddy.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Removing a label
+
+To remove a custom container label from an app, use the `caddy:label:remove` command:
+
+```shell
+dokku caddy:label:remove node-js-app caddy.directive
+```
+
+This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Showing labels
+
+To view all custom container labels for an app, use the `caddy:label:show` command:
+
+```shell
+dokku caddy:label:show node-js-app
+```
+
+To view a specific label value, provide the label name:
+
+```shell
+dokku caddy:label:show node-js-app caddy.directive
+```
+
 ### SSL Configuration
 
 The caddy plugin only supports automatic ssl certificates from its letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.
diff --git a/docs/networking/proxies/haproxy.md b/docs/networking/proxies/haproxy.md
index eda8e27bd..eeba92578 100644
--- a/docs/networking/proxies/haproxy.md
+++ b/docs/networking/proxies/haproxy.md
@@ -113,6 +113,54 @@ dokku haproxy:set --global log-level DEBUG
 
 After modifying,  the Haproxy container will need to be restarted.
 
+### Label Management
+
+The Haproxy plugin allows you to add custom container labels to apps. These labels are injected into containers during deployment and can be used to configure Haproxy behavior beyond what the plugin provides by default.
+
+Refer to the upstream [EasyHaproxy](https://github.com/byjg/docker-easy-haproxy) documentation for more information on what labels are available.
+
+#### Adding a label
+
+To add a custom container label to an app, use the `haproxy:label:add` command:
+
+```shell
+dokku haproxy:label:add node-js-app haproxy.directive value
+```
+
+This will add the label `haproxy.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Removing a label
+
+To remove a custom container label from an app, use the `haproxy:label:remove` command:
+
+```shell
+dokku haproxy:label:remove node-js-app haproxy.directive
+```
+
+This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Showing labels
+
+To view all custom container labels for an app, use the `haproxy:label:show` command:
+
+```shell
+dokku haproxy:label:show node-js-app
+```
+
+To view a specific label value, provide the label name:
+
+```shell
+dokku haproxy:label:show node-js-app haproxy.directive
+```
+
 ### SSL Configuration
 
 The haproxy plugin only supports automatic ssl certificates from it's letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.
diff --git a/docs/networking/proxies/openresty.md b/docs/networking/proxies/openresty.md
index 1a275de05..b56db421b 100644
--- a/docs/networking/proxies/openresty.md
+++ b/docs/networking/proxies/openresty.md
@@ -124,6 +124,54 @@ The following folders within an app repository may have `*.conf` files that will
 - `openresty/http-includes/`: Injected in the `server` block serving http(s) requests for the app.
 - `openresty/http-location-includes/`: Injected in the `location` block that proxies to the app in the app's respective `server` block.
 
+### Label Management
+
+The OpenResty plugin allows you to add custom container labels to apps. These labels are injected into containers during deployment and can be used to configure OpenResty behavior beyond what the plugin provides by default.
+
+Refer to the upstream [openresty-docker-proxy](https://github.com/dokku/openresty-docker-proxy) documentation for more information on what labels are available.
+
+#### Adding a label
+
+To add a custom container label to an app, use the `openresty:label:add` command:
+
+```shell
+dokku openresty:label:add node-js-app openresty.directive value
+```
+
+This will add the label `openresty.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Removing a label
+
+To remove a custom container label from an app, use the `openresty:label:remove` command:
+
+```shell
+dokku openresty:label:remove node-js-app openresty.directive
+```
+
+This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Showing labels
+
+To view all custom container labels for an app, use the `openresty:label:show` command:
+
+```shell
+dokku openresty:label:show node-js-app
+```
+
+To view a specific label value, provide the label name:
+
+```shell
+dokku openresty:label:show node-js-app openresty.directive
+```
+
 ### SSL Configuration
 
 The OpenResty plugin only supports automatic ssl certificates from it's letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.
diff --git a/docs/networking/proxies/traefik.md b/docs/networking/proxies/traefik.md
index 3d8fe76f5..f8163fca0 100644
--- a/docs/networking/proxies/traefik.md
+++ b/docs/networking/proxies/traefik.md
@@ -127,6 +127,54 @@ dokku traefik:set --global log-level DEBUG
 
 After modifying, the Traefik container will need to be restarted.
 
+### Label Management
+
+The Traefik plugin allows you to add custom container labels to apps. These labels are injected into containers during deployment and can be used to configure Traefik behavior beyond what the plugin provides by default.
+
+Refer to the upstream [Traefik](https://doc.traefik.io/traefik/) documentation for more information on what labels are available.
+
+#### Adding a label
+
+To add a custom container label to an app, use the `traefik:label:add` command:
+
+```shell
+dokku traefik:label:add node-js-app traefik.directive value
+```
+
+This will add the label `traefik.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Removing a label
+
+To remove a custom container label from an app, use the `traefik:label:remove` command:
+
+```shell
+dokku traefik:label:remove node-js-app traefik.directive
+```
+
+This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
+
+```shell
+dokku ps:rebuild node-js-app
+```
+
+#### Showing labels
+
+To view all custom container labels for an app, use the `traefik:label:show` command:
+
+```shell
+dokku traefik:label:show node-js-app
+```
+
+To view a specific label value, provide the label name:
+
+```shell
+dokku traefik:label:show node-js-app traefik.directive
+```
+
 ### SSL Configuration
 
 The traefik plugin only supports automatic ssl certificates from it's letsencrypt integration. Managed certificates provided by the `certs` plugin are ignored.

From acd981d50e2e98be851c4c90da8f864710358f30 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 17:57:58 -0500
Subject: [PATCH 160/427] fix: ensure the commands can actually be called

---
 plugins/caddy-vhosts/commands     | 2 +-
 plugins/haproxy-vhosts/commands   | 2 +-
 plugins/openresty-vhosts/commands | 2 +-
 plugins/traefik-vhosts/commands   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugins/caddy-vhosts/commands b/plugins/caddy-vhosts/commands
index 76a267f5a..69d03291b 100755
--- a/plugins/caddy-vhosts/commands
+++ b/plugins/caddy-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " caddy:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " caddy:help caddy:label:add caddy:label:remove caddy:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/command-functions"
 set -eo pipefail
diff --git a/plugins/haproxy-vhosts/commands b/plugins/haproxy-vhosts/commands
index fc866b7b8..1aee82aaf 100755
--- a/plugins/haproxy-vhosts/commands
+++ b/plugins/haproxy-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " haproxy:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " haproxy:help haproxy:label:add haproxy:label:remove haproxy:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/command-functions"
 set -eo pipefail
diff --git a/plugins/openresty-vhosts/commands b/plugins/openresty-vhosts/commands
index 6b76d4e68..5db817463 100755
--- a/plugins/openresty-vhosts/commands
+++ b/plugins/openresty-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " openresty:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " openresty:help openresty:label:add openresty:label:remove openresty:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/command-functions"
 set -eo pipefail
diff --git a/plugins/traefik-vhosts/commands b/plugins/traefik-vhosts/commands
index 24a440dff..43c1e7cb5 100755
--- a/plugins/traefik-vhosts/commands
+++ b/plugins/traefik-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " traefik:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " traefik:help traefik:label:add traefik:label:remove traefik:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/command-functions"
 set -eo pipefail

From 01570012c5e57d9b43cbf21f5544cfc26835e11a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 17:58:14 -0500
Subject: [PATCH 161/427] fix: correctly call function

---
 plugins/caddy-vhosts/docker-args-process-deploy     | 2 +-
 plugins/haproxy-vhosts/docker-args-process-deploy   | 2 +-
 plugins/openresty-vhosts/docker-args-process-deploy | 2 +-
 plugins/traefik-vhosts/docker-args-process-deploy   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugins/caddy-vhosts/docker-args-process-deploy b/plugins/caddy-vhosts/docker-args-process-deploy
index bfbc33cf3..abc478d1c 100755
--- a/plugins/caddy-vhosts/docker-args-process-deploy
+++ b/plugins/caddy-vhosts/docker-args-process-deploy
@@ -129,7 +129,7 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
     fi
   fi
 
-  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" caddy)
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "caddy" "$APP")
   fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
 
   if [[ -f "$proxy_labels_file_path" ]]; then
diff --git a/plugins/haproxy-vhosts/docker-args-process-deploy b/plugins/haproxy-vhosts/docker-args-process-deploy
index e60931fc7..8a9565027 100755
--- a/plugins/haproxy-vhosts/docker-args-process-deploy
+++ b/plugins/haproxy-vhosts/docker-args-process-deploy
@@ -124,7 +124,7 @@ trigger-haproxy-vhosts-docker-args-process-deploy() {
     fi
   fi
 
-  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" haproxy)
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "haproxy" "$APP")
   fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
 
   if [[ -f "$proxy_labels_file_path" ]]; then
diff --git a/plugins/openresty-vhosts/docker-args-process-deploy b/plugins/openresty-vhosts/docker-args-process-deploy
index 6c116b2e2..a298cb2e0 100755
--- a/plugins/openresty-vhosts/docker-args-process-deploy
+++ b/plugins/openresty-vhosts/docker-args-process-deploy
@@ -182,7 +182,7 @@ trigger-openresty-vhosts-docker-args-process-deploy() {
   value="$(fn-openresty-x-forwarded-ssl "$APP")"
   [[ -n "$value" ]] && output="$output '--label=openresty.x-forwarded-ssl=$value'"
 
-  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" openresty)
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "openresty" "$APP")
   fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
 
   if [[ -f "$proxy_labels_file_path" ]]; then
diff --git a/plugins/traefik-vhosts/docker-args-process-deploy b/plugins/traefik-vhosts/docker-args-process-deploy
index ea01d0c33..2eb95d5da 100755
--- a/plugins/traefik-vhosts/docker-args-process-deploy
+++ b/plugins/traefik-vhosts/docker-args-process-deploy
@@ -131,7 +131,7 @@ trigger-traefik-vhosts-docker-args-process-deploy() {
     fi
   fi
 
-  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "$APP" traefik)
+  local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "traefik" "$APP")
   fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
 
   if [[ -f "$proxy_labels_file_path" ]]; then

From e397604841dc97ed2f186f5823cec3dcb13ccbbf Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 17:59:46 -0500
Subject: [PATCH 162/427] refactor: move the labels to the properties folder

To be quite honest, these should just be in the docker-options plugin, but I think its fine to have them tracked separately for now.
---
 plugins/caddy-vhosts/post-create     | 14 ++++++++++++++
 plugins/common/properties.go         |  8 ++++++++
 plugins/common/property-functions    |  6 ++++++
 plugins/common/src/prop/prop.go      |  7 +++++++
 plugins/haproxy-vhosts/post-create   | 14 ++++++++++++++
 plugins/openresty-vhosts/post-create | 14 ++++++++++++++
 plugins/proxy/functions              |  2 +-
 plugins/traefik-vhosts/post-create   | 14 ++++++++++++++
 8 files changed, 78 insertions(+), 1 deletion(-)
 create mode 100755 plugins/caddy-vhosts/post-create
 create mode 100755 plugins/haproxy-vhosts/post-create
 create mode 100755 plugins/openresty-vhosts/post-create
 create mode 100755 plugins/traefik-vhosts/post-create

diff --git a/plugins/caddy-vhosts/post-create b/plugins/caddy-vhosts/post-create
new file mode 100755
index 000000000..ef6b515ed
--- /dev/null
+++ b/plugins/caddy-vhosts/post-create
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-caddy-vhosts-post-create() {
+  declare desc="caddy-vhosts post-create trigger"
+  declare trigger="post-create"
+  declare APP="$1"
+
+  fn-plugin-property-setup-app "caddy" "$APP"
+}
+
+trigger-caddy-vhosts-post-create "$@"
diff --git a/plugins/common/properties.go b/plugins/common/properties.go
index b472c24b9..c6c6e3b3e 100644
--- a/plugins/common/properties.go
+++ b/plugins/common/properties.go
@@ -540,6 +540,14 @@ func PropertySetup(pluginName string) error {
 	})
 }
 
+func PropertySetupApp(pluginName string, appName string) error {
+	if err := makePluginAppPropertyPath(pluginName, appName); err != nil {
+		return fmt.Errorf("Unable to create %s config directory for %s: %s", pluginName, appName, err.Error())
+	}
+
+	return nil
+}
+
 func getPropertyPath(pluginName string, appName string, property string) string {
 	pluginAppConfigRoot := getPluginAppPropertyPath(pluginName, appName)
 	return filepath.Join(pluginAppConfigRoot, property)
diff --git a/plugins/common/property-functions b/plugins/common/property-functions
index 2c45dcfd5..00d8a6a11 100755
--- a/plugins/common/property-functions
+++ b/plugins/common/property-functions
@@ -104,3 +104,9 @@ fn-plugin-property-setup() {
   declare PLUGIN="$1"
   "$PLUGIN_CORE_AVAILABLE_PATH/common/prop" "setup" "$PLUGIN"
 }
+
+fn-plugin-property-setup-app() {
+  declare desc="setup the properties for an app"
+  declare PLUGIN="$1" APP="$2"
+  "$PLUGIN_CORE_AVAILABLE_PATH/common/prop" "setup-app" "$PLUGIN" "$APP"
+}
diff --git a/plugins/common/src/prop/prop.go b/plugins/common/src/prop/prop.go
index 9c06bb2bb..5c2a87c78 100644
--- a/plugins/common/src/prop/prop.go
+++ b/plugins/common/src/prop/prop.go
@@ -194,5 +194,12 @@ func main() {
 			fmt.Fprintln(os.Stderr, err.Error())
 			os.Exit(1)
 		}
+	case "setup-app":
+		appName := flag.Arg(2)
+		err := common.PropertySetupApp(pluginName, appName)
+		if err != nil {
+			fmt.Fprintln(os.Stderr, err.Error())
+			os.Exit(1)
+		}
 	}
 }
diff --git a/plugins/haproxy-vhosts/post-create b/plugins/haproxy-vhosts/post-create
new file mode 100755
index 000000000..e484971b8
--- /dev/null
+++ b/plugins/haproxy-vhosts/post-create
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-haproxy-vhosts-post-create() {
+  declare desc="haproxy-vhosts post-create trigger"
+  declare trigger="post-create"
+  declare APP="$1"
+
+  fn-plugin-property-setup-app "haproxy" "$APP"
+}
+
+trigger-haproxy-vhosts-post-create "$@"
diff --git a/plugins/openresty-vhosts/post-create b/plugins/openresty-vhosts/post-create
new file mode 100755
index 000000000..0438e22fb
--- /dev/null
+++ b/plugins/openresty-vhosts/post-create
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+
+trigger-openresty-vhosts-post-create() {
+  declare desc="openresty-vhosts post-create trigger"
+  declare trigger="post-create"
+  declare APP="$1"
+
+  fn-plugin-property-setup-app "openresty" "$APP"
+}
+
+trigger-openresty-vhosts-post-create "$@"
diff --git a/plugins/proxy/functions b/plugins/proxy/functions
index 7a83e9677..df5e04374 100755
--- a/plugins/proxy/functions
+++ b/plugins/proxy/functions
@@ -47,7 +47,7 @@ fn-proxy-report-label-overwrite() {
 fn-proxy-get-labels-file-path() {
   declare desc="return proxy labels config file path for specified proxy"
   declare PROXY="$1" APP="$2"
-  local PROXY_FILE="${DOKKU_ROOT}/${APP}/PROXY_LABELS_${PROXY^^}"
+  local PROXY_FILE="${DOKKU_LIB_ROOT}/config/${PROXY}/${APP}/labels"
 
   echo "$PROXY_FILE"
 }
diff --git a/plugins/traefik-vhosts/post-create b/plugins/traefik-vhosts/post-create
new file mode 100755
index 000000000..2e65c1f4c
--- /dev/null
+++ b/plugins/traefik-vhosts/post-create
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/property-functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-traefik-vhosts-post-create() {
+  declare desc="traefik-vhosts post-create trigger"
+  declare trigger="post-create"
+  declare APP="$1"
+
+  fn-plugin-property-setup-app "traefik" "$APP"
+}
+
+trigger-traefik-vhosts-post-create "$@"

From 18be8f4fa979b0e6f28a8f303061b9eaaf192e76 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:00:04 -0500
Subject: [PATCH 163/427] fix: use correct argument name

---
 plugins/proxy/functions | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/proxy/functions b/plugins/proxy/functions
index df5e04374..d3bef0026 100755
--- a/plugins/proxy/functions
+++ b/plugins/proxy/functions
@@ -28,7 +28,7 @@ fn-proxy-report-label-overwrite() {
 
         --label*)
           local label_name="$(echo "$line" | sed -E "s/^--label ['\"]([^=]+)=.*/\1/")"
-          local escaped_label_name="$(fn-proxy-escape-extended-sed "$passed_label_name")"
+          local escaped_label_name="$(fn-proxy-escape-extended-sed "$label_name")"
           local match="$(echo "$LABELS" | sed -E "s/.*--label ['\"]($escaped_label_name)=.*/\1/")"
           if [[ -n "$match" ]]; then
             dokku_log_warn "Dokku label \"$match\" will be overwritten by user-set proxy label."
@@ -70,7 +70,7 @@ fn-proxy-show-label() {
   fi
 
   local all_proxy_labels="$(<"$proxy_labels_file_path")"
-  local escaped_label_name="$(fn-proxy-escape-extended-sed "$passed_label_name")"
+  local escaped_label_name="$(fn-proxy-escape-extended-sed "$PASSED_LABEL_NAME")"
   local proxy_label_value="$(echo -e "${all_proxy_labels}" | sed -E -n "s/^--label ['\"]${escaped_label_name}=(.*)['\"] \$/\1/p")"
 
   echo "$proxy_label_value"

From 3f5a022970ec3a773b194c52537ef8c267199d0a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:00:40 -0500
Subject: [PATCH 164/427] tests: force remove the file to silence warnings

---
 tests/unit/test_helper.bash | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index c53880f24..3614c5ffc 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -31,7 +31,7 @@ global_setup() {
 
 global_teardown() {
   [[ -n "$BATS_TEST_COMPLETED" ]] || touch "${BATS_PARENT_TMPNAME}.skip"
-  rm "${BATS_PARENT_TMPNAME}.skip" || true
+  rm -f "${BATS_PARENT_TMPNAME}.skip" || true
   cleanup_apps
   cleanup_containers
 }

From ff8ccd280126b360bb3787b985e22f8f436b42bc Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:01:20 -0500
Subject: [PATCH 165/427] tests: add tests for functionality

---
 tests/unit/caddy.bats       | 69 +++++++++++++++++++++++++++++++++++++
 tests/unit/haproxy.bats     | 69 +++++++++++++++++++++++++++++++++++++
 tests/unit/openresty.bats   | 69 +++++++++++++++++++++++++++++++++++++
 tests/unit/test_helper.bash |  4 +++
 tests/unit/traefik.bats     | 69 +++++++++++++++++++++++++++++++++++++
 5 files changed, 280 insertions(+)

diff --git a/tests/unit/caddy.bats b/tests/unit/caddy.bats
index d48d41196..fae317341 100644
--- a/tests/unit/caddy.bats
+++ b/tests/unit/caddy.bats
@@ -147,3 +147,72 @@ teardown() {
   echo "status: $status"
   assert_output "http:80:5000 https:443:5000"
 }
+
+@test "(caddy) label management" {
+  run /bin/bash -c "dokku proxy:set $TEST_APP caddy"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku caddy:label:add $TEST_APP caddy.directive value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku caddy:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "caddy.directive=value"
+
+  run /bin/bash -c "dokku caddy:label:show $TEST_APP caddy.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku caddy:label:show $TEST_APP caddy.directive2"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run deploy_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"caddy.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku caddy:label:remove $TEST_APP caddy.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku caddy:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "caddy.directive=value"
+
+  run /bin/bash -c "dokku caddy:label:show $TEST_APP caddy.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run /bin/bash -c "dokku ps:rebuild $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"caddy.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+}
diff --git a/tests/unit/haproxy.bats b/tests/unit/haproxy.bats
index afd3ffe02..a63d2530c 100644
--- a/tests/unit/haproxy.bats
+++ b/tests/unit/haproxy.bats
@@ -172,3 +172,72 @@ teardown() {
   echo "status: $status"
   assert_output "http:80:5000 https:443:5000"
 }
+
+@test "(haproxy) label management" {
+  run /bin/bash -c "dokku proxy:set $TEST_APP haproxy"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku haproxy:label:add $TEST_APP haproxy.directive value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku haproxy:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "haproxy.directive=value"
+
+  run /bin/bash -c "dokku haproxy:label:show $TEST_APP haproxy.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku haproxy:label:show $TEST_APP haproxy.directive2"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run deploy_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"haproxy.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku haproxy:label:remove $TEST_APP haproxy.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku haproxy:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "haproxy.directive=value"
+
+  run /bin/bash -c "dokku haproxy:label:show $TEST_APP haproxy.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run /bin/bash -c "dokku ps:rebuild $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"haproxy.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+}
diff --git a/tests/unit/openresty.bats b/tests/unit/openresty.bats
index f7e5d6c5c..1e100c311 100644
--- a/tests/unit/openresty.bats
+++ b/tests/unit/openresty.bats
@@ -245,6 +245,75 @@ teardown() {
   assert_output_contains "charset UTF-8;"
 }
 
+@test "(openresty) label management" {
+  run /bin/bash -c "dokku proxy:set $TEST_APP openresty"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku openresty:label:add $TEST_APP openresty.directive value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku openresty:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "openresty.directive=value"
+
+  run /bin/bash -c "dokku openresty:label:show $TEST_APP openresty.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku openresty:label:show $TEST_APP openresty.directive2"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run deploy_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"openresty.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku openresty:label:remove $TEST_APP openresty.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku openresty:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "openresty.directive=value"
+
+  run /bin/bash -c "dokku openresty:label:show $TEST_APP openresty.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run /bin/bash -c "dokku ps:rebuild $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"openresty.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+}
+
 add_openresty_include() {
   local APP="$1"
   local APP_REPO_DIR="$2"
diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 3614c5ffc..06546ce70 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -151,6 +151,10 @@ assert_output_contains() {
   assert_equal "$count" "$found"
 }
 
+assert_output_not_contains() {
+  assert_output_contains "$1" 0
+}
+
 # ShellCheck doesn't know about $lines from Bats
 assert_line() {
   if [[ "$1" -ge 0 ]] 2>/dev/null; then
diff --git a/tests/unit/traefik.bats b/tests/unit/traefik.bats
index a50ea2160..35a364c69 100644
--- a/tests/unit/traefik.bats
+++ b/tests/unit/traefik.bats
@@ -299,3 +299,72 @@ teardown() {
   assert_success
   assert_output "websecure"
 }
+
+@test "(traefik) label management" {
+  run /bin/bash -c "dokku proxy:set $TEST_APP traefik"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:label:add $TEST_APP traefik.directive value"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "traefik.directive=value"
+
+  run /bin/bash -c "dokku traefik:label:show $TEST_APP traefik.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku traefik:label:show $TEST_APP traefik.directive2"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run deploy_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"traefik.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "value"
+
+  run /bin/bash -c "dokku traefik:label:remove $TEST_APP traefik.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:label:show $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "traefik.directive=value"
+
+  run /bin/bash -c "dokku traefik:label:show $TEST_APP traefik.directive"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run /bin/bash -c "dokku ps:rebuild $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "docker inspect $TEST_APP.web.1 --format '{{ index .Config.Labels \"traefik.directive\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+}

From d9073272df57b9e6ad89fd02978af6248ccc852b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:06:56 -0500
Subject: [PATCH 166/427] fix: minor help output formatting

---
 plugins/config/src/commands/commands.go        | 2 +-
 plugins/scheduler-k3s/src/commands/commands.go | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/config/src/commands/commands.go b/plugins/config/src/commands/commands.go
index ea894fba0..ddbfc46b1 100644
--- a/plugins/config/src/commands/commands.go
+++ b/plugins/config/src/commands/commands.go
@@ -24,7 +24,7 @@ Additional commands:`
     config:clear [--no-restart] (<app>|--global), Clears environment variables
     config:export [--format=FORMAT] [--merged] (<app>|--global), Export a global or app environment
     config:get [--quoted] (<app>|--global) KEY, Display a global or app-specific config value
-	config:import [--no-restart] [--replace] (<app>|--global) [FILE|-], Import environment from file
+    config:import [--no-restart] [--replace] (<app>|--global) [FILE|-], Import environment from file
     config:keys [--merged] (<app>|--global), Show keys set in environment
     config:show [--merged] (<app>|--global), Show keys set in environment
     config:set [--encoded] [--no-restart] (<app>|--global) KEY1=VALUE1 [KEY2=VALUE2 ...], Set one or more config vars
diff --git a/plugins/scheduler-k3s/src/commands/commands.go b/plugins/scheduler-k3s/src/commands/commands.go
index a87f59ad8..4f78f018d 100644
--- a/plugins/scheduler-k3s/src/commands/commands.go
+++ b/plugins/scheduler-k3s/src/commands/commands.go
@@ -22,7 +22,7 @@ Additional commands:`
     scheduler-k3s:cluster-add [--insecure-allow-unknown-hosts] [--server-ip SERVER_IP] [--taint-scheduling] <ssh://user@host:port>, Adds a server node to a Dokku-managed cluster
     scheduler-k3s:cluster-list [--format json|stdout], Lists all nodes in a Dokku-managed cluster
     scheduler-k3s:cluster-remove [node-id], Removes client node to a Dokku-managed cluster
-	scheduler-k3s:ensure-charts, Ensures the k3s charts are installed
+    scheduler-k3s:ensure-charts, Ensures the k3s charts are installed
     scheduler-k3s:initialize [--server-ip SERVER_IP] [--taint-scheduling], Initializes a cluster
     scheduler-k3s:labels:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear a label for a given app/process-type/resource-type combination
     scheduler-k3s:report [<app>] [<flag>], Displays a scheduler-k3s report for one or more apps

From d212fd44c7fcd4f87789a4baf2a040d3eb3be938 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:12:28 -0500
Subject: [PATCH 167/427] refactor: rename functions to be plural

They are plural for the scheduler-k3s plugin.
---
 docs/networking/proxies/caddy.md           | 14 +++++++-------
 docs/networking/proxies/haproxy.md         | 14 +++++++-------
 docs/networking/proxies/openresty.md       | 14 +++++++-------
 docs/networking/proxies/traefik.md         | 14 +++++++-------
 plugins/caddy-vhosts/command-functions     | 18 +++++++++---------
 plugins/caddy-vhosts/commands              | 14 +++++++-------
 plugins/caddy-vhosts/help-functions        |  6 +++---
 plugins/haproxy-vhosts/command-functions   | 18 +++++++++---------
 plugins/haproxy-vhosts/commands            | 14 +++++++-------
 plugins/haproxy-vhosts/help-functions      |  6 +++---
 plugins/openresty-vhosts/command-functions | 18 +++++++++---------
 plugins/openresty-vhosts/commands          | 14 +++++++-------
 plugins/openresty-vhosts/help-functions    |  6 +++---
 plugins/proxy/command-functions            | 14 +++++++-------
 plugins/traefik-vhosts/command-functions   | 18 +++++++++---------
 plugins/traefik-vhosts/commands            | 14 +++++++-------
 plugins/traefik-vhosts/help-functions      |  6 +++---
 tests/unit/caddy.bats                      | 14 +++++++-------
 tests/unit/haproxy.bats                    | 14 +++++++-------
 tests/unit/openresty.bats                  | 14 +++++++-------
 tests/unit/traefik.bats                    | 14 +++++++-------
 21 files changed, 139 insertions(+), 139 deletions(-)

diff --git a/docs/networking/proxies/caddy.md b/docs/networking/proxies/caddy.md
index ed713f960..454086960 100644
--- a/docs/networking/proxies/caddy.md
+++ b/docs/networking/proxies/caddy.md
@@ -125,10 +125,10 @@ Refer to the upstream [caddy-docker-proxy](https://github.com/lucaslorentz/caddy
 
 #### Adding a label
 
-To add a custom container label to an app, use the `caddy:label:add` command:
+To add a custom container label to an app, use the `caddy:labels:add` command:
 
 ```shell
-dokku caddy:label:add node-js-app caddy.directive value
+dokku caddy:labels:add node-js-app caddy.directive value
 ```
 
 This will add the label `caddy.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
@@ -139,10 +139,10 @@ dokku ps:rebuild node-js-app
 
 #### Removing a label
 
-To remove a custom container label from an app, use the `caddy:label:remove` command:
+To remove a custom container label from an app, use the `caddy:labels:remove` command:
 
 ```shell
-dokku caddy:label:remove node-js-app caddy.directive
+dokku caddy:labels:remove node-js-app caddy.directive
 ```
 
 This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
@@ -153,16 +153,16 @@ dokku ps:rebuild node-js-app
 
 #### Showing labels
 
-To view all custom container labels for an app, use the `caddy:label:show` command:
+To view all custom container labels for an app, use the `caddy:labels:show` command:
 
 ```shell
-dokku caddy:label:show node-js-app
+dokku caddy:labels:show node-js-app
 ```
 
 To view a specific label value, provide the label name:
 
 ```shell
-dokku caddy:label:show node-js-app caddy.directive
+dokku caddy:labels:show node-js-app caddy.directive
 ```
 
 ### SSL Configuration
diff --git a/docs/networking/proxies/haproxy.md b/docs/networking/proxies/haproxy.md
index eeba92578..13b0f2272 100644
--- a/docs/networking/proxies/haproxy.md
+++ b/docs/networking/proxies/haproxy.md
@@ -121,10 +121,10 @@ Refer to the upstream [EasyHaproxy](https://github.com/byjg/docker-easy-haproxy)
 
 #### Adding a label
 
-To add a custom container label to an app, use the `haproxy:label:add` command:
+To add a custom container label to an app, use the `haproxy:labels:add` command:
 
 ```shell
-dokku haproxy:label:add node-js-app haproxy.directive value
+dokku haproxy:labels:add node-js-app haproxy.directive value
 ```
 
 This will add the label `haproxy.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
@@ -135,10 +135,10 @@ dokku ps:rebuild node-js-app
 
 #### Removing a label
 
-To remove a custom container label from an app, use the `haproxy:label:remove` command:
+To remove a custom container label from an app, use the `haproxy:labels:remove` command:
 
 ```shell
-dokku haproxy:label:remove node-js-app haproxy.directive
+dokku haproxy:labels:remove node-js-app haproxy.directive
 ```
 
 This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
@@ -149,16 +149,16 @@ dokku ps:rebuild node-js-app
 
 #### Showing labels
 
-To view all custom container labels for an app, use the `haproxy:label:show` command:
+To view all custom container labels for an app, use the `haproxy:labels:show` command:
 
 ```shell
-dokku haproxy:label:show node-js-app
+dokku haproxy:labels:show node-js-app
 ```
 
 To view a specific label value, provide the label name:
 
 ```shell
-dokku haproxy:label:show node-js-app haproxy.directive
+dokku haproxy:labels:show node-js-app haproxy.directive
 ```
 
 ### SSL Configuration
diff --git a/docs/networking/proxies/openresty.md b/docs/networking/proxies/openresty.md
index b56db421b..d1597be95 100644
--- a/docs/networking/proxies/openresty.md
+++ b/docs/networking/proxies/openresty.md
@@ -132,10 +132,10 @@ Refer to the upstream [openresty-docker-proxy](https://github.com/dokku/openrest
 
 #### Adding a label
 
-To add a custom container label to an app, use the `openresty:label:add` command:
+To add a custom container label to an app, use the `openresty:labels:add` command:
 
 ```shell
-dokku openresty:label:add node-js-app openresty.directive value
+dokku openresty:labels:add node-js-app openresty.directive value
 ```
 
 This will add the label `openresty.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
@@ -146,10 +146,10 @@ dokku ps:rebuild node-js-app
 
 #### Removing a label
 
-To remove a custom container label from an app, use the `openresty:label:remove` command:
+To remove a custom container label from an app, use the `openresty:labels:remove` command:
 
 ```shell
-dokku openresty:label:remove node-js-app openresty.directive
+dokku openresty:labels:remove node-js-app openresty.directive
 ```
 
 This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
@@ -160,16 +160,16 @@ dokku ps:rebuild node-js-app
 
 #### Showing labels
 
-To view all custom container labels for an app, use the `openresty:label:show` command:
+To view all custom container labels for an app, use the `openresty:labels:show` command:
 
 ```shell
-dokku openresty:label:show node-js-app
+dokku openresty:labels:show node-js-app
 ```
 
 To view a specific label value, provide the label name:
 
 ```shell
-dokku openresty:label:show node-js-app openresty.directive
+dokku openresty:labels:show node-js-app openresty.directive
 ```
 
 ### SSL Configuration
diff --git a/docs/networking/proxies/traefik.md b/docs/networking/proxies/traefik.md
index f8163fca0..a6718f0fa 100644
--- a/docs/networking/proxies/traefik.md
+++ b/docs/networking/proxies/traefik.md
@@ -135,10 +135,10 @@ Refer to the upstream [Traefik](https://doc.traefik.io/traefik/) documentation f
 
 #### Adding a label
 
-To add a custom container label to an app, use the `traefik:label:add` command:
+To add a custom container label to an app, use the `traefik:labels:add` command:
 
 ```shell
-dokku traefik:label:add node-js-app traefik.directive value
+dokku traefik:labels:add node-js-app traefik.directive value
 ```
 
 This will add the label `traefik.directive=value` to the app's containers. After adding a label, you will need to rebuild or redeploy the app for the label to be applied to running containers.
@@ -149,10 +149,10 @@ dokku ps:rebuild node-js-app
 
 #### Removing a label
 
-To remove a custom container label from an app, use the `traefik:label:remove` command:
+To remove a custom container label from an app, use the `traefik:labels:remove` command:
 
 ```shell
-dokku traefik:label:remove node-js-app traefik.directive
+dokku traefik:labels:remove node-js-app traefik.directive
 ```
 
 This will remove the specified label from the app. After removing a label, you will need to rebuild or redeploy the app for the change to be applied to running containers.
@@ -163,16 +163,16 @@ dokku ps:rebuild node-js-app
 
 #### Showing labels
 
-To view all custom container labels for an app, use the `traefik:label:show` command:
+To view all custom container labels for an app, use the `traefik:labels:show` command:
 
 ```shell
-dokku traefik:label:show node-js-app
+dokku traefik:labels:show node-js-app
 ```
 
 To view a specific label value, provide the label name:
 
 ```shell
-dokku traefik:label:show node-js-app traefik.directive
+dokku traefik:labels:show node-js-app traefik.directive
 ```
 
 ### SSL Configuration
diff --git a/plugins/caddy-vhosts/command-functions b/plugins/caddy-vhosts/command-functions
index c2ec92404..56817212e 100755
--- a/plugins/caddy-vhosts/command-functions
+++ b/plugins/caddy-vhosts/command-functions
@@ -5,28 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-caddy-label-add() {
+cmd-caddy-labels-add() {
   declare desc="adds container label to app for specified proxy"
-  declare cmd="caddy:label:add"
+  declare cmd="caddy:labels:add"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-add "proxy:label:add" "caddy" "$@"
+  cmd-proxy-labels-add "proxy:labels:add" "caddy" "$@"
 }
 
-cmd-caddy-label-remove() {
+cmd-caddy-labels-remove() {
   declare desc="removes container label from app for specified proxy"
-  declare cmd="caddy:label:remove"
+  declare cmd="caddy:labels:remove"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-remove "proxy:label:remove" "caddy" "$@"
+  cmd-proxy-labels-remove "proxy:labels:remove" "caddy" "$@"
 }
 
-cmd-caddy-label-show() {
+cmd-caddy-labels-show() {
   declare desc="shows container labels for app for specified proxy"
-  declare cmd="caddy:label:show"
+  declare cmd="caddy:labels:show"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-show "proxy:label:show" "caddy" "$@"
+  cmd-proxy-labels-show "proxy:labels:show" "caddy" "$@"
 }
 
 cmd-caddy-report() {
diff --git a/plugins/caddy-vhosts/commands b/plugins/caddy-vhosts/commands
index 69d03291b..de26adef2 100755
--- a/plugins/caddy-vhosts/commands
+++ b/plugins/caddy-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " caddy:help caddy:label:add caddy:label:remove caddy:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " caddy:help caddy:labels:add caddy:labels:remove caddy:labels:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/caddy-vhosts/command-functions"
 set -eo pipefail
@@ -10,16 +10,16 @@ case "$1" in
     cmd-caddy-help "$@"
     ;;
 
-  caddy:label:add)
-    cmd-caddy-label-add "$@"
+  caddy:labels:add)
+    cmd-caddy-labels-add "$@"
     ;;
 
-  caddy:label:remove)
-    cmd-caddy-label-remove "$@"
+  caddy:labels:remove)
+    cmd-caddy-labels-remove "$@"
     ;;
 
-  caddy:label:show)
-    cmd-caddy-label-show "$@"
+  caddy:labels:show)
+    cmd-caddy-labels-show "$@"
     ;;
 
   *)
diff --git a/plugins/caddy-vhosts/help-functions b/plugins/caddy-vhosts/help-functions
index 6ea1b1f3e..19d17a00e 100755
--- a/plugins/caddy-vhosts/help-functions
+++ b/plugins/caddy-vhosts/help-functions
@@ -30,9 +30,9 @@ fn-help-content() {
     caddy:report [<app>] [<flag>], Displays an caddy report for one or more apps
     caddy:set <app> <property> (<value>), Set or clear an caddy property for an app
     caddy:show-config <app>, Display caddy compose config
-    caddy:label:add <app> <label> <value>, Add a label to an caddy app
-    caddy:label:remove <app> <label>, Remove a label from an caddy app
-    caddy:label:show <app> [<label>], Show labels for an caddy app
+    caddy:labels:add <app> <label> <value>, Add a label to an caddy app
+    caddy:labels:remove <app> <label>, Remove a label from an caddy app
+    caddy:labels:show <app> [<label>], Show labels for an caddy app
     caddy:start, Starts the caddy server
     caddy:stop, Stops the caddy server
 help_content
diff --git a/plugins/haproxy-vhosts/command-functions b/plugins/haproxy-vhosts/command-functions
index d7a4633c1..0f907bb08 100755
--- a/plugins/haproxy-vhosts/command-functions
+++ b/plugins/haproxy-vhosts/command-functions
@@ -5,28 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-haproxy-label-add() {
+cmd-haproxy-labels-add() {
   declare desc="adds container label to app for specified proxy"
-  declare cmd="haproxy:label:add"
+  declare cmd="haproxy:labels:add"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-add "proxy:label:add" "haproxy" "$@"
+  cmd-proxy-labels-add "proxy:labels:add" "haproxy" "$@"
 }
 
-cmd-haproxy-label-remove() {
+cmd-haproxy-labels-remove() {
   declare desc="removes container label from app for specified proxy"
-  declare cmd="haproxy:label:remove"
+  declare cmd="haproxy:labels:remove"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-remove "proxy:label:remove" "haproxy" "$@"
+  cmd-proxy-labels-remove "proxy:labels:remove" "haproxy" "$@"
 }
 
-cmd-haproxy-label-show() {
+cmd-haproxy-labels-show() {
   declare desc="shows container labels for app for specified proxy"
-  declare cmd="haproxy:label:show"
+  declare cmd="haproxy:labels:show"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-show "proxy:label:show" "haproxy" "$@"
+  cmd-proxy-labels-show "proxy:labels:show" "haproxy" "$@"
 }
 
 cmd-haproxy-report() {
diff --git a/plugins/haproxy-vhosts/commands b/plugins/haproxy-vhosts/commands
index 1aee82aaf..ad2ea9bcc 100755
--- a/plugins/haproxy-vhosts/commands
+++ b/plugins/haproxy-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " haproxy:help haproxy:label:add haproxy:label:remove haproxy:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " haproxy:help haproxy:labels:add haproxy:labels:remove haproxy:labels:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/haproxy-vhosts/command-functions"
 set -eo pipefail
@@ -10,16 +10,16 @@ case "$1" in
     cmd-haproxy-help "$@"
     ;;
 
-  haproxy:label:add)
-    cmd-haproxy-label-add "$@"
+  haproxy:labels:add)
+    cmd-haproxy-labels-add "$@"
     ;;
 
-  haproxy:label:remove)
-    cmd-haproxy-label-remove "$@"
+  haproxy:labels:remove)
+    cmd-haproxy-labels-remove "$@"
     ;;
 
-  haproxy:label:show)
-    cmd-haproxy-label-show "$@"
+  haproxy:labels:show)
+    cmd-haproxy-labels-show "$@"
     ;;
 
   *)
diff --git a/plugins/haproxy-vhosts/help-functions b/plugins/haproxy-vhosts/help-functions
index b638cfe27..ee9fd7851 100755
--- a/plugins/haproxy-vhosts/help-functions
+++ b/plugins/haproxy-vhosts/help-functions
@@ -30,9 +30,9 @@ fn-help-content() {
     haproxy:report [<app>] [<flag>], Displays an haproxy report for one or more apps
     haproxy:set <app> <property> (<value>), Set or clear an haproxy property for an app
     haproxy:show-config <app>, Display haproxy compose config
-    haproxy:label:add <app> <label> <value>, Add a label to an haproxy app
-    haproxy:label:remove <app> <label>, Remove a label from an haproxy app
-    haproxy:label:show <app> [<label>], Show labels for an haproxy app
+    haproxy:labels:add <app> <label> <value>, Add a label to an haproxy app
+    haproxy:labels:remove <app> <label>, Remove a label from an haproxy app
+    haproxy:labels:show <app> [<label>], Show labels for an haproxy app
     haproxy:start, Starts the haproxy server
     haproxy:stop, Stops the haproxy server
 help_content
diff --git a/plugins/openresty-vhosts/command-functions b/plugins/openresty-vhosts/command-functions
index ef887cde4..081362b91 100755
--- a/plugins/openresty-vhosts/command-functions
+++ b/plugins/openresty-vhosts/command-functions
@@ -5,28 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-openresty-label-add() {
+cmd-openresty-labels-add() {
   declare desc="adds container label to app for specified proxy"
-  declare cmd="openresty:label:add"
+  declare cmd="openresty:labels:add"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-add "proxy:label:add" "openresty" "$@"
+  cmd-proxy-labels-add "proxy:labels:add" "openresty" "$@"
 }
 
-cmd-openresty-label-remove() {
+cmd-openresty-labels-remove() {
   declare desc="removes container label from app for specified proxy"
-  declare cmd="openresty:label:remove"
+  declare cmd="openresty:labels:remove"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-remove "proxy:label:remove" "openresty" "$@"
+  cmd-proxy-labels-remove "proxy:labels:remove" "openresty" "$@"
 }
 
-cmd-openresty-label-show() {
+cmd-openresty-labels-show() {
   declare desc="shows container labels for app for specified proxy"
-  declare cmd="openresty:label:show"
+  declare cmd="openresty:labels:show"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-show "proxy:label:show" "openresty" "$@"
+  cmd-proxy-labels-show "proxy:labels:show" "openresty" "$@"
 }
 
 cmd-openresty-report() {
diff --git a/plugins/openresty-vhosts/commands b/plugins/openresty-vhosts/commands
index 5db817463..42611e2f4 100755
--- a/plugins/openresty-vhosts/commands
+++ b/plugins/openresty-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " openresty:help openresty:label:add openresty:label:remove openresty:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " openresty:help openresty:labels:add openresty:labels:remove openresty:labels:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/openresty-vhosts/command-functions"
 set -eo pipefail
@@ -10,16 +10,16 @@ case "$1" in
     cmd-openresty-help "$@"
     ;;
 
-  openresty:label:add)
-    cmd-openresty-label-add "$@"
+  openresty:labels:add)
+    cmd-openresty-labels-add "$@"
     ;;
 
-  openresty:label:remove)
-    cmd-openresty-label-remove "$@"
+  openresty:labels:remove)
+    cmd-openresty-labels-remove "$@"
     ;;
 
-  openresty:label:show)
-    cmd-openresty-label-show "$@"
+  openresty:labels:show)
+    cmd-openresty-labels-show "$@"
     ;;
 
   *)
diff --git a/plugins/openresty-vhosts/help-functions b/plugins/openresty-vhosts/help-functions
index 3e02a6029..565efb124 100755
--- a/plugins/openresty-vhosts/help-functions
+++ b/plugins/openresty-vhosts/help-functions
@@ -30,9 +30,9 @@ fn-help-content() {
     openresty:report [<app>] [<flag>], Displays an openresty report for one or more apps
     openresty:set <app> <property> (<value>), Set or clear an openresty property for an app
     openresty:show-config <app>, Display openresty compose config
-    openresty:label:add <app> <label> <value>, Add a label to an openresty app
-    openresty:label:remove <app> <label>, Remove a label from an openresty app
-    openresty:label:show <app> [<label>], Show labels for an openresty app
+    openresty:labels:add <app> <label> <value>, Add a label to an openresty app
+    openresty:labels:remove <app> <label>, Remove a label from an openresty app
+    openresty:labels:show <app> [<label>], Show labels for an openresty app
     openresty:start, Starts the openresty server
     openresty:stop, Stops the openresty server
 help_content
diff --git a/plugins/proxy/command-functions b/plugins/proxy/command-functions
index 2bc6e1170..33bc0d0cb 100755
--- a/plugins/proxy/command-functions
+++ b/plugins/proxy/command-functions
@@ -4,9 +4,9 @@ source "$PLUGIN_AVAILABLE_PATH/proxy/functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-proxy-label-show() {
+cmd-proxy-labels-show() {
   declare desc="show a proxy label for an app"
-  declare cmd="proxy:label:show"
+  declare cmd="proxy:labels:show"
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
   shift 2
@@ -22,9 +22,9 @@ cmd-proxy-label-show() {
   fn-proxy-display-labels "$PROXY" "$APP"
 }
 
-cmd-proxy-label-add() {
+cmd-proxy-labels-add() {
   declare desc="adds container label to app for specified proxy"
-  declare cmd="proxy:label:add"
+  declare cmd="proxy:labels:add"
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3" PASSED_LABEL_VALUE="$4"
 
@@ -35,15 +35,15 @@ cmd-proxy-label-add() {
 
   local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
   touch "$proxy_labels_file_path"
-  cmd-proxy-label-remove "$PROXY" "$APP" "$PASSED_LABEL_NAME" >/dev/null
+  cmd-proxy-labels-remove "$PROXY" "$APP" "$PASSED_LABEL_NAME" >/dev/null
   echo "--label '${PASSED_LABEL_NAME}=${PASSED_LABEL_VALUE}' " >>"$proxy_labels_file_path"
   local all_proxy_labels="$(<"$proxy_labels_file_path")"
   echo -e "${all_proxy_labels}" | sed '/^$/d' | sort -u >"$proxy_labels_file_path"
 }
 
-cmd-proxy-label-remove() {
+cmd-proxy-labels-remove() {
   declare desc="removes container label from app for specified proxy"
-  declare cmd="proxy:label:remove"
+  declare cmd="proxy:labels:remove"
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
 
diff --git a/plugins/traefik-vhosts/command-functions b/plugins/traefik-vhosts/command-functions
index 32a3d9e75..f468a0fc9 100755
--- a/plugins/traefik-vhosts/command-functions
+++ b/plugins/traefik-vhosts/command-functions
@@ -5,28 +5,28 @@ source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/internal-functions"
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
-cmd-traefik-label-add() {
+cmd-traefik-labels-add() {
   declare desc="adds container label to app for specified proxy"
-  declare cmd="traefik:label:add"
+  declare cmd="traefik:labels:add"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-add "proxy:label:add" "traefik" "$@"
+  cmd-proxy-labels-add "proxy:labels:add" "traefik" "$@"
 }
 
-cmd-traefik-label-remove() {
+cmd-traefik-labels-remove() {
   declare desc="removes container label from app for specified proxy"
-  declare cmd="traefik:label:remove"
+  declare cmd="traefik:labels:remove"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-remove "proxy:label:remove" "traefik" "$@"
+  cmd-proxy-labels-remove "proxy:labels:remove" "traefik" "$@"
 }
 
-cmd-traefik-label-show() {
+cmd-traefik-labels-show() {
   declare desc="shows container labels for app for specified proxy"
-  declare cmd="traefik:label:show"
+  declare cmd="traefik:labels:show"
   [[ "$1" == "$cmd" ]] && shift 1
 
-  cmd-proxy-label-show "proxy:label:show" "traefik" "$@"
+  cmd-proxy-labels-show "proxy:labels:show" "traefik" "$@"
 }
 
 cmd-traefik-report() {
diff --git a/plugins/traefik-vhosts/commands b/plugins/traefik-vhosts/commands
index 43c1e7cb5..baf5ba9e5 100755
--- a/plugins/traefik-vhosts/commands
+++ b/plugins/traefik-vhosts/commands
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-[[ " traefik:help traefik:label:add traefik:label:remove traefik:label:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
+[[ " traefik:help traefik:labels:add traefik:labels:remove traefik:labels:show help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/help-functions"
 source "$PLUGIN_AVAILABLE_PATH/traefik-vhosts/command-functions"
 set -eo pipefail
@@ -10,16 +10,16 @@ case "$1" in
     cmd-traefik-help "$@"
     ;;
 
-  traefik:label:add)
-    cmd-traefik-label-add "$@"
+  traefik:labels:add)
+    cmd-traefik-labels-add "$@"
     ;;
 
-  traefik:label:remove)
-    cmd-traefik-label-remove "$@"
+  traefik:labels:remove)
+    cmd-traefik-labels-remove "$@"
     ;;
 
-  traefik:label:show)
-    cmd-traefik-label-show "$@"
+  traefik:labels:show)
+    cmd-traefik-labels-show "$@"
     ;;
 
   *)
diff --git a/plugins/traefik-vhosts/help-functions b/plugins/traefik-vhosts/help-functions
index 92199caf1..7c569570b 100755
--- a/plugins/traefik-vhosts/help-functions
+++ b/plugins/traefik-vhosts/help-functions
@@ -30,9 +30,9 @@ fn-help-content() {
     traefik:report [<app>] [<flag>], Displays an traefik report for one or more apps
     traefik:set <app> <property> (<value>), Set or clear an traefik property for an app
     traefik:show-config <app>, Display traefik compose config
-    traefik:label:add <app> <label> <value>, Add a label to an traefik app
-    traefik:label:remove <app> <label>, Remove a label from an traefik app
-    traefik:label:show <app> [<label>], Show labels for an traefik app
+    traefik:labels:add <app> <label> <value>, Add a label to an traefik app
+    traefik:labels:remove <app> <label>, Remove a label from an traefik app
+    traefik:labels:show <app> [<label>], Show labels for an traefik app
     traefik:start, Starts the traefik server
     traefik:stop, Stops the traefik server
 help_content
diff --git a/tests/unit/caddy.bats b/tests/unit/caddy.bats
index fae317341..eef11eed4 100644
--- a/tests/unit/caddy.bats
+++ b/tests/unit/caddy.bats
@@ -154,24 +154,24 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku caddy:label:add $TEST_APP caddy.directive value"
+  run /bin/bash -c "dokku caddy:labels:add $TEST_APP caddy.directive value"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku caddy:label:show $TEST_APP"
+  run /bin/bash -c "dokku caddy:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_contains "caddy.directive=value"
 
-  run /bin/bash -c "dokku caddy:label:show $TEST_APP caddy.directive"
+  run /bin/bash -c "dokku caddy:labels:show $TEST_APP caddy.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku caddy:label:show $TEST_APP caddy.directive2"
+  run /bin/bash -c "dokku caddy:labels:show $TEST_APP caddy.directive2"
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -188,18 +188,18 @@ teardown() {
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku caddy:label:remove $TEST_APP caddy.directive"
+  run /bin/bash -c "dokku caddy:labels:remove $TEST_APP caddy.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku caddy:label:show $TEST_APP"
+  run /bin/bash -c "dokku caddy:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_not_contains "caddy.directive=value"
 
-  run /bin/bash -c "dokku caddy:label:show $TEST_APP caddy.directive"
+  run /bin/bash -c "dokku caddy:labels:show $TEST_APP caddy.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/haproxy.bats b/tests/unit/haproxy.bats
index a63d2530c..89f749044 100644
--- a/tests/unit/haproxy.bats
+++ b/tests/unit/haproxy.bats
@@ -179,24 +179,24 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku haproxy:label:add $TEST_APP haproxy.directive value"
+  run /bin/bash -c "dokku haproxy:labels:add $TEST_APP haproxy.directive value"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku haproxy:label:show $TEST_APP"
+  run /bin/bash -c "dokku haproxy:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_contains "haproxy.directive=value"
 
-  run /bin/bash -c "dokku haproxy:label:show $TEST_APP haproxy.directive"
+  run /bin/bash -c "dokku haproxy:labels:show $TEST_APP haproxy.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku haproxy:label:show $TEST_APP haproxy.directive2"
+  run /bin/bash -c "dokku haproxy:labels:show $TEST_APP haproxy.directive2"
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -213,18 +213,18 @@ teardown() {
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku haproxy:label:remove $TEST_APP haproxy.directive"
+  run /bin/bash -c "dokku haproxy:labels:remove $TEST_APP haproxy.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku haproxy:label:show $TEST_APP"
+  run /bin/bash -c "dokku haproxy:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_not_contains "haproxy.directive=value"
 
-  run /bin/bash -c "dokku haproxy:label:show $TEST_APP haproxy.directive"
+  run /bin/bash -c "dokku haproxy:labels:show $TEST_APP haproxy.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/openresty.bats b/tests/unit/openresty.bats
index 1e100c311..10b19af8c 100644
--- a/tests/unit/openresty.bats
+++ b/tests/unit/openresty.bats
@@ -251,24 +251,24 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku openresty:label:add $TEST_APP openresty.directive value"
+  run /bin/bash -c "dokku openresty:labels:add $TEST_APP openresty.directive value"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku openresty:label:show $TEST_APP"
+  run /bin/bash -c "dokku openresty:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_contains "openresty.directive=value"
 
-  run /bin/bash -c "dokku openresty:label:show $TEST_APP openresty.directive"
+  run /bin/bash -c "dokku openresty:labels:show $TEST_APP openresty.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku openresty:label:show $TEST_APP openresty.directive2"
+  run /bin/bash -c "dokku openresty:labels:show $TEST_APP openresty.directive2"
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -285,18 +285,18 @@ teardown() {
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku openresty:label:remove $TEST_APP openresty.directive"
+  run /bin/bash -c "dokku openresty:labels:remove $TEST_APP openresty.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku openresty:label:show $TEST_APP"
+  run /bin/bash -c "dokku openresty:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_not_contains "openresty.directive=value"
 
-  run /bin/bash -c "dokku openresty:label:show $TEST_APP openresty.directive"
+  run /bin/bash -c "dokku openresty:labels:show $TEST_APP openresty.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/traefik.bats b/tests/unit/traefik.bats
index 35a364c69..4c2aee542 100644
--- a/tests/unit/traefik.bats
+++ b/tests/unit/traefik.bats
@@ -306,24 +306,24 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku traefik:label:add $TEST_APP traefik.directive value"
+  run /bin/bash -c "dokku traefik:labels:add $TEST_APP traefik.directive value"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku traefik:label:show $TEST_APP"
+  run /bin/bash -c "dokku traefik:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_contains "traefik.directive=value"
 
-  run /bin/bash -c "dokku traefik:label:show $TEST_APP traefik.directive"
+  run /bin/bash -c "dokku traefik:labels:show $TEST_APP traefik.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku traefik:label:show $TEST_APP traefik.directive2"
+  run /bin/bash -c "dokku traefik:labels:show $TEST_APP traefik.directive2"
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -340,18 +340,18 @@ teardown() {
   assert_success
   assert_output "value"
 
-  run /bin/bash -c "dokku traefik:label:remove $TEST_APP traefik.directive"
+  run /bin/bash -c "dokku traefik:labels:remove $TEST_APP traefik.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku traefik:label:show $TEST_APP"
+  run /bin/bash -c "dokku traefik:labels:show $TEST_APP"
   echo "output: $output"
   echo "status: $status"
   assert_success
   assert_output_not_contains "traefik.directive=value"
 
-  run /bin/bash -c "dokku traefik:label:show $TEST_APP traefik.directive"
+  run /bin/bash -c "dokku traefik:labels:show $TEST_APP traefik.directive"
   echo "output: $output"
   echo "status: $status"
   assert_success

From d4783685d13423df4d313c94f8109aabbaccbd6d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:12:38 -0500
Subject: [PATCH 168/427] chore: update header for displaying app labels

---
 plugins/proxy/functions | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/proxy/functions b/plugins/proxy/functions
index d3bef0026..61cb75658 100755
--- a/plugins/proxy/functions
+++ b/plugins/proxy/functions
@@ -56,7 +56,7 @@ fn-proxy-display-labels() {
   declare desc="print user-set app container labels for specified proxy"
   declare PROXY="$1" APP="$2"
   local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
-  echo "${PROXY^} labels:"
+  dokku_log_info2_quiet "${APP} ${PROXY} labels"
   sed -e 's/^/    /' "$proxy_labels_file_path"
 }
 

From a40c42019b3fe3e93df23f55500dfab46fff940c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:42:57 -0500
Subject: [PATCH 169/427] fix: do not shift arguments

---
 plugins/proxy/command-functions | 1 -
 1 file changed, 1 deletion(-)

diff --git a/plugins/proxy/command-functions b/plugins/proxy/command-functions
index 33bc0d0cb..59bed39ed 100755
--- a/plugins/proxy/command-functions
+++ b/plugins/proxy/command-functions
@@ -9,7 +9,6 @@ cmd-proxy-labels-show() {
   declare cmd="proxy:labels:show"
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
-  shift 2
 
   [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
   verify_app_name "$APP"

From 5df11a0a1ff6486628aece069c575ea7724b55a7 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:44:21 -0500
Subject: [PATCH 170/427] refactor: store labels in key=value format

This makes it easier to display at the cost of removing the override warnings (for now).
---
 .../caddy-vhosts/docker-args-process-deploy   |  9 ++-
 .../haproxy-vhosts/docker-args-process-deploy |  9 ++-
 .../docker-args-process-deploy                |  9 ++-
 plugins/proxy/command-functions               |  4 +-
 plugins/proxy/functions                       | 57 +++++++------------
 .../traefik-vhosts/docker-args-process-deploy |  9 ++-
 6 files changed, 37 insertions(+), 60 deletions(-)

diff --git a/plugins/caddy-vhosts/docker-args-process-deploy b/plugins/caddy-vhosts/docker-args-process-deploy
index abc478d1c..7b909315c 100755
--- a/plugins/caddy-vhosts/docker-args-process-deploy
+++ b/plugins/caddy-vhosts/docker-args-process-deploy
@@ -130,12 +130,11 @@ trigger-caddy-vhosts-docker-args-process-deploy() {
   fi
 
   local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "caddy" "$APP")
-  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
-
   if [[ -f "$proxy_labels_file_path" ]]; then
-    local user_proxy_labels="$(<"$proxy_labels_file_path")"
-    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
-    output="$output $user_proxy_labels"
+    while read -r line; do
+      [[ -z "$line" ]] && continue
+      output="$output --label '$line'"
+    done <"$proxy_labels_file_path"
   fi
 
   echo -n "$STDIN$output"
diff --git a/plugins/haproxy-vhosts/docker-args-process-deploy b/plugins/haproxy-vhosts/docker-args-process-deploy
index 8a9565027..94eed72dd 100755
--- a/plugins/haproxy-vhosts/docker-args-process-deploy
+++ b/plugins/haproxy-vhosts/docker-args-process-deploy
@@ -125,12 +125,11 @@ trigger-haproxy-vhosts-docker-args-process-deploy() {
   fi
 
   local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "haproxy" "$APP")
-  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
-
   if [[ -f "$proxy_labels_file_path" ]]; then
-    local user_proxy_labels="$(<"$proxy_labels_file_path")"
-    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
-    output="$output $user_proxy_labels"
+    while read -r line; do
+      [[ -z "$line" ]] && continue
+      output="$output --label '$line'"
+    done <"$proxy_labels_file_path"
   fi
 
   echo -n "$STDIN$output"
diff --git a/plugins/openresty-vhosts/docker-args-process-deploy b/plugins/openresty-vhosts/docker-args-process-deploy
index a298cb2e0..273e1def2 100755
--- a/plugins/openresty-vhosts/docker-args-process-deploy
+++ b/plugins/openresty-vhosts/docker-args-process-deploy
@@ -183,12 +183,11 @@ trigger-openresty-vhosts-docker-args-process-deploy() {
   [[ -n "$value" ]] && output="$output '--label=openresty.x-forwarded-ssl=$value'"
 
   local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "openresty" "$APP")
-  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
-
   if [[ -f "$proxy_labels_file_path" ]]; then
-    local user_proxy_labels="$(<"$proxy_labels_file_path")"
-    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
-    output="$output $user_proxy_labels"
+    while read -r line; do
+      [[ -z "$line" ]] && continue
+      output="$output --label '$line'"
+    done <"$proxy_labels_file_path"
   fi
 
   echo -n "$STDIN$output"
diff --git a/plugins/proxy/command-functions b/plugins/proxy/command-functions
index 59bed39ed..8d96bc67c 100755
--- a/plugins/proxy/command-functions
+++ b/plugins/proxy/command-functions
@@ -35,7 +35,7 @@ cmd-proxy-labels-add() {
   local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
   touch "$proxy_labels_file_path"
   cmd-proxy-labels-remove "$PROXY" "$APP" "$PASSED_LABEL_NAME" >/dev/null
-  echo "--label '${PASSED_LABEL_NAME}=${PASSED_LABEL_VALUE}' " >>"$proxy_labels_file_path"
+  echo "${PASSED_LABEL_NAME}=${PASSED_LABEL_VALUE}" >>"$proxy_labels_file_path"
   local all_proxy_labels="$(<"$proxy_labels_file_path")"
   echo -e "${all_proxy_labels}" | sed '/^$/d' | sort -u >"$proxy_labels_file_path"
 }
@@ -57,6 +57,6 @@ cmd-proxy-labels-remove() {
 
   local all_proxy_labels="$(<"$proxy_labels_file_path")"
   local escaped_label_name="$(fn-proxy-escape-extended-sed "$PASSED_LABEL_NAME")"
-  local all_proxy_labels="$(echo -e "${all_proxy_labels}" | sed -E "s/^--label ['\"]${escaped_label_name}=.*\$//")"
+  local all_proxy_labels="$(echo -e "${all_proxy_labels}" | sed -E "s/^${escaped_label_name}=.*\$//")"
   echo -e "${all_proxy_labels}" | sed '/^$/d' | sort -u >"$proxy_labels_file_path"
 }
diff --git a/plugins/proxy/functions b/plugins/proxy/functions
index 61cb75658..f73692b1d 100755
--- a/plugins/proxy/functions
+++ b/plugins/proxy/functions
@@ -9,41 +9,6 @@ fn-proxy-escape-extended-sed() {
   echo "$input" | sed -E 's#[][()\.^$?*+{}|/]#\\&#g'
 }
 
-fn-proxy-report-label-overwrite() {
-  declare desc="overwrite proxy labels file with new labels"
-  declare LABELS="$1" PROXY_LABELS_FILE_PATH="$2"
-
-  if [[ -f "$PROXY_LABELS_FILE_PATH" ]]; then
-    local DONE=false
-    until $DONE; do
-      local line
-      read -r line || local DONE=true
-
-      [[ -z "$line" ]] && continue
-
-      case "$line" in
-        \#*)
-          continue
-          ;;
-
-        --label*)
-          local label_name="$(echo "$line" | sed -E "s/^--label ['\"]([^=]+)=.*/\1/")"
-          local escaped_label_name="$(fn-proxy-escape-extended-sed "$label_name")"
-          local match="$(echo "$LABELS" | sed -E "s/.*--label ['\"]($escaped_label_name)=.*/\1/")"
-          if [[ -n "$match" ]]; then
-            dokku_log_warn "Dokku label \"$match\" will be overwritten by user-set proxy label."
-          fi
-          continue
-          ;;
-
-        *)
-          dokku_log_warn "Invalid line '$line' in proxy label file $PROXY_FILE_PATH"
-          ;;
-      esac
-    done <"$PROXY_LABELS_FILE_PATH"
-  fi
-}
-
 fn-proxy-get-labels-file-path() {
   declare desc="return proxy labels config file path for specified proxy"
   declare PROXY="$1" APP="$2"
@@ -56,8 +21,24 @@ fn-proxy-display-labels() {
   declare desc="print user-set app container labels for specified proxy"
   declare PROXY="$1" APP="$2"
   local proxy_labels_file_path="$(fn-proxy-get-labels-file-path "$PROXY" "$APP")"
-  dokku_log_info2_quiet "${APP} ${PROXY} labels"
-  sed -e 's/^/    /' "$proxy_labels_file_path"
+  if [[ -s "$proxy_labels_file_path" ]]; then
+    dokku_log_info2_quiet "${APP} ${PROXY} labels"
+    while read -r line; do
+      [[ -z "$line" ]] && continue
+
+      case "$line" in
+        \#*)
+          continue
+          ;;
+
+        *)
+          dokku_log_verbose "$line"
+          ;;
+      esac
+    done <"$proxy_labels_file_path"
+  else
+    dokku_log_warn_quiet "No ${PROXY} labels set for ${APP}"
+  fi
 }
 
 fn-proxy-show-label() {
@@ -71,7 +52,7 @@ fn-proxy-show-label() {
 
   local all_proxy_labels="$(<"$proxy_labels_file_path")"
   local escaped_label_name="$(fn-proxy-escape-extended-sed "$PASSED_LABEL_NAME")"
-  local proxy_label_value="$(echo -e "${all_proxy_labels}" | sed -E -n "s/^--label ['\"]${escaped_label_name}=(.*)['\"] \$/\1/p")"
+  local proxy_label_value="$(echo -e "${all_proxy_labels}" | sed -E -n "s/^${escaped_label_name}=(.*)\$/\1/p")"
 
   echo "$proxy_label_value"
 }
diff --git a/plugins/traefik-vhosts/docker-args-process-deploy b/plugins/traefik-vhosts/docker-args-process-deploy
index 2eb95d5da..d127288d8 100755
--- a/plugins/traefik-vhosts/docker-args-process-deploy
+++ b/plugins/traefik-vhosts/docker-args-process-deploy
@@ -132,12 +132,11 @@ trigger-traefik-vhosts-docker-args-process-deploy() {
   fi
 
   local proxy_labels_file_path=$(fn-proxy-get-labels-file-path "traefik" "$APP")
-  fn-proxy-report-label-overwrite "$output" "$proxy_labels_file_path"
-
   if [[ -f "$proxy_labels_file_path" ]]; then
-    local user_proxy_labels="$(<"$proxy_labels_file_path")"
-    user_proxy_labels="$(echo "$user_proxy_labels" | tr '\r\n' ' ')"
-    output="$output $user_proxy_labels"
+    while read -r line; do
+      [[ -z "$line" ]] && continue
+      output="$output --label '$line'"
+    done <"$proxy_labels_file_path"
   fi
 
   echo -n "$STDIN$output"

From 9d002ccab590deb20c28d048fc2bb6337ea2146c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:47:13 -0500
Subject: [PATCH 171/427] fix: correct the error message

---
 plugins/proxy/command-functions | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/proxy/command-functions b/plugins/proxy/command-functions
index 8d96bc67c..6343b3bf8 100755
--- a/plugins/proxy/command-functions
+++ b/plugins/proxy/command-functions
@@ -10,7 +10,7 @@ cmd-proxy-labels-show() {
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
 
-  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:labels:show command"
   verify_app_name "$APP"
 
   if [[ -n "$PASSED_LABEL_NAME" ]]; then
@@ -27,7 +27,7 @@ cmd-proxy-labels-add() {
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3" PASSED_LABEL_VALUE="$4"
 
-  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:labels:add command"
   [[ -z "$PASSED_LABEL_NAME" ]] && dokku_log_fail "Please specify a container label for the app"
   [[ -z "$PASSED_LABEL_VALUE" ]] && dokku_log_fail "Please specify a value for the container label"
   verify_app_name "$APP"
@@ -46,7 +46,7 @@ cmd-proxy-labels-remove() {
   [[ "$1" == "$cmd" ]] && shift 1
   declare PROXY="$1" APP="$2" PASSED_LABEL_NAME="$3"
 
-  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:label command"
+  [[ -z "$PROXY" ]] && dokku_log_fail "Error invoking proxy:labels:remove command"
   [[ -z "$PASSED_LABEL_NAME" ]] && dokku_log_fail "Please specify a container label for the app"
   verify_app_name "$APP"
 

From 75945ee0d77e33a4170f298387e7d143b09ef756 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:50:04 -0500
Subject: [PATCH 172/427] docs: correct the release version for railpacks
 support

Refs #7956 (thanks @pil0u)
---
 docs/deployment/builders/railpack.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/deployment/builders/railpack.md b/docs/deployment/builders/railpack.md
index cde329846..d7aef6d5b 100644
--- a/docs/deployment/builders/railpack.md
+++ b/docs/deployment/builders/railpack.md
@@ -1,7 +1,7 @@
 # Railpack
 
 > [!IMPORTANT]
-> New as of 0.32.0
+> New as of 0.37.0
 
 The `railpack` builder builds apps via [Railpack](https://railpack.com/), a buildpack alternative.
 

From e394776c3b4ed26d155d125187b3b53ce6897df9 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 18:52:19 -0500
Subject: [PATCH 173/427] fix: drop deprecated aufs check

Closes #8102
---
 debian/postinst | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/debian/postinst b/debian/postinst
index f3bcee171..6e6976f08 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -128,9 +128,6 @@ case "$1" in
   configure)
     mandb
     [ ! -x /usr/bin/docker.io ] || ln -sf /usr/bin/docker.io /usr/local/bin/docker
-    if [[ -f /sbin/modprobe ]]; then
-      modprobe aufs || echo "WARNING: Restart server to finish installing dokku!"
-    fi
 
     setup-user
     setup-storage

From f33d3d852f7fde652d4ed2987bb3cc2773711033 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 16 Nov 2025 23:53:02 -0500
Subject: [PATCH 174/427] feat: allow specifying kubelet-args when adding a new
 node to the cluster

Kubelet arguments are useful for specifying settings such as supported sysctl fields.
---
 plugins/scheduler-k3s/src/subcommands/subcommands.go | 3 ++-
 plugins/scheduler-k3s/subcommands.go                 | 6 +++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/plugins/scheduler-k3s/src/subcommands/subcommands.go b/plugins/scheduler-k3s/src/subcommands/subcommands.go
index 88f776999..1c55fac2c 100644
--- a/plugins/scheduler-k3s/src/subcommands/subcommands.go
+++ b/plugins/scheduler-k3s/src/subcommands/subcommands.go
@@ -59,10 +59,11 @@ func main() {
 		allowUknownHosts := args.Bool("insecure-allow-unknown-hosts", false, "insecure-allow-unknown-hosts: allow unknown hosts")
 		taintScheduling := args.Bool("taint-scheduling", false, "taint-scheduling: add a taint against scheduling app workloads")
 		serverIP := args.String("server-ip", "", "server-ip: IP address of the dokku server node")
+		kubeletArgs := args.StringToString("kubelet-args", map[string]string{}, "kubelet-args: a key=value map of kubelet arguments")
 		role := args.String("role", "worker", "role: [ server | worker ]")
 		args.Parse(os.Args[2:])
 		remoteHost := args.Arg(0)
-		err = scheduler_k3s.CommandClusterAdd(*role, remoteHost, *serverIP, *allowUknownHosts, *taintScheduling)
+		err = scheduler_k3s.CommandClusterAdd(*role, remoteHost, *serverIP, *allowUknownHosts, *taintScheduling, *kubeletArgs)
 	case "cluster-list":
 		args := flag.NewFlagSet("scheduler-k3s:cluster-list", flag.ExitOnError)
 		format := args.String("format", "stdout", "format: [ stdout | json ]")
diff --git a/plugins/scheduler-k3s/subcommands.go b/plugins/scheduler-k3s/subcommands.go
index 27fbdc4c2..b1361d5a5 100644
--- a/plugins/scheduler-k3s/subcommands.go
+++ b/plugins/scheduler-k3s/subcommands.go
@@ -400,7 +400,7 @@ func CommandInitialize(ingressClass string, serverIP string, taintScheduling boo
 }
 
 // CommandClusterAdd adds a server to the k3s cluster
-func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUknownHosts bool, taintScheduling bool) error {
+func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUknownHosts bool, taintScheduling bool, kubeletArgs map[string]string) error {
 	if err := isK3sInstalled(); err != nil {
 		return fmt.Errorf("k3s not installed, cannot add node to cluster: %w", err)
 	}
@@ -665,6 +665,10 @@ export INSTALL_K3S_VERSION=%s
 		args = append(args, "--node-taint", "CriticalAddonsOnly=true:NoSchedule")
 	}
 
+	for key, value := range kubeletArgs {
+		args = append(args, "--kubelet-arg", fmt.Sprintf("%s=%s", key, value))
+	}
+
 	common.LogInfo2Quiet(fmt.Sprintf("Adding %s k3s cluster", nodeName))
 	joinCmd, err := common.CallSshCommand(common.SshCommandInput{
 		Command:          "/tmp/k3s-installer-executor.sh",

From ffd0a813113f200298a6dfd8841d6e44c7e33dc5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Nov 2025 13:07:46 +0000
Subject: [PATCH 175/427] chore(deps): bump click from 8.3.0 to 8.3.1 in
 /docs/_build

Bumps [click](https://github.com/pallets/click) from 8.3.0 to 8.3.1.
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/8.3.1/CHANGES.rst)
- [Commits](https://github.com/pallets/click/compare/8.3.0...8.3.1)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index b71a1f74b..247a6a921 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -1,5 +1,5 @@
 beautifulsoup4==4.14.2
-click==8.3.0
+click==8.3.1
 ghp-import==2.1.0
 importlib-metadata==8.7.0
 Jinja2==3.1.6

From d4bfd0b7fac4aa6b114031a7a3d9726cbe68c025 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Nov 2025 15:23:47 +0000
Subject: [PATCH 176/427] chore(deps): bump js-yaml from 3.14.1 to 3.14.2 in
 /tests/apps/multi

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/package-lock.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/tests/apps/multi/package-lock.json b/tests/apps/multi/package-lock.json
index f325cefff..85c271297 100644
--- a/tests/apps/multi/package-lock.json
+++ b/tests/apps/multi/package-lock.json
@@ -920,9 +920,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "3.14.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
-      "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
+      "version": "3.14.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
       "dependencies": {
         "argparse": "^1.0.7",
         "esprima": "^4.0.0"
@@ -2412,9 +2412,9 @@
       "integrity": "sha1-TkMekrEalzFjaqH5yNHMvP2reN8="
     },
     "js-yaml": {
-      "version": "3.14.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
-      "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
+      "version": "3.14.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
       "requires": {
         "argparse": "^1.0.7",
         "esprima": "^4.0.0"

From d05925f6f104f97b20d2c290632a5e716310c947 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 18 Nov 2025 02:35:16 -0500
Subject: [PATCH 177/427] feat: allow skipping the install trigger when
 installing a plugin

During docker image generation, certain folders either do not exist or are symlinked in an odd fashion, causing the install trigger to fail. This is not the case at runtime, so we should defer the install trigger until container start and provide a method of skipping it when generating a docker image.

Closes #7308
---
 docker/etc/my_init.d/10_dokku_init       | 2 +-
 docs/advanced-usage/plugin-management.md | 8 +++++++-
 docs/getting-started/install/docker.md   | 4 ++--
 plugins/plugin/functions                 | 7 +++++++
 plugins/plugin/help-functions            | 2 +-
 plugins/plugin/subcommands/install       | 1 -
 6 files changed, 18 insertions(+), 6 deletions(-)

diff --git a/docker/etc/my_init.d/10_dokku_init b/docker/etc/my_init.d/10_dokku_init
index 6307ddefa..38948d4af 100755
--- a/docker/etc/my_init.d/10_dokku_init
+++ b/docker/etc/my_init.d/10_dokku_init
@@ -86,7 +86,7 @@ main() {
   fi
 
   # run core install triggers to force create any folders that may be missing
-  dokku plugin:install --core
+  dokku plugin:install
 
   if [[ -n "$DOKKU_HOSTNAME" ]]; then
     echo "dokku dokku/hostname string $DOKKU_HOSTNAME" | debconf-set-selections
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 475a561a0..9da9d35fb 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -6,7 +6,7 @@
 ```
 plugin:disable <name>                    # Disable an installed plugin (third-party only)
 plugin:enable <name>                     # Enable a previously disabled plugin
-plugin:install [--core|git-url] [--committish branch|commit|tag] [--name custom-plugin-name]           # Optionally download git-url (and pin to the specified branch/commit/tag) & run install trigger for active plugins (or only core ones)
+plugin:install [--core|git-url] [--committish branch|commit|tag] [--name custom-plugin-name] [--skip-install-trigger] # Optionally download git-url (and pin to the specified branch/commit/tag) & run install trigger for active plugins (or only core ones)
 plugin:installed <name>                  # Checks if a plugin is installed
 plugin:install-dependencies [--core]     # Run install-dependencies trigger for active plugins (or only core ones)
 plugin:list                              # Print active plugins
@@ -128,6 +128,12 @@ The `--core` flag may also be indicated as the sole argument, though it is only
 dokku plugin:install --core
 ```
 
+If installing plugins in a Dockerfile, you will want to skip the `install` trigger. This will be run on container boot.
+
+```shell
+dokku plugin:install https://github.com/dokku/smoke-test-plugin.git --name smoke-test-plugin --skip-install-trigger
+```
+
 Finally, all flags may be omitted to trigger the `install` procedures for both core and third-party plugins:
 
 ```shell
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 47dc1bf98..53c4f9dd7 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -84,8 +84,8 @@ The alternative is to build a custom docker image via a custom Dockerfile. This
 
 ```Dockerfile
 FROM dokku/dokku:0.36.11
-RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git postgres
-RUN dokku plugin:install https://github.com/dokku/dokku-redis.git redis
+RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
+RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
 
 ## SSH Key Management
diff --git a/plugins/plugin/functions b/plugins/plugin/functions
index dd237aca5..fc5290c80 100755
--- a/plugins/plugin/functions
+++ b/plugins/plugin/functions
@@ -33,6 +33,7 @@ download_and_enable_plugin() {
   declare desc="wrapper to download and enable specified version of plugin"
   local PLUGIN_GIT_URL="$1"
   shift
+  local SKIP_INSTALL_TRIGGER=false
   while getopts ":-:" opt "$@"; do
     case "$opt" in
       -)
@@ -47,6 +48,9 @@ download_and_enable_plugin() {
             OPTIND=$((OPTIND + 1))
             local CUSTOM_NAME="$val"
             ;;
+          skip-install-trigger)
+            SKIP_INSTALL_TRIGGER=true
+            ;;
         esac
         ;;
     esac
@@ -58,6 +62,9 @@ download_and_enable_plugin() {
   if [[ -n "$PLUGIN_COMMITTISH" ]]; then
     update_plugin "$PLUGIN_NAME" "$PLUGIN_COMMITTISH"
   fi
+  if [[ "$SKIP_INSTALL_TRIGGER" == "false" ]]; then
+    plugn trigger install
+  fi
 }
 
 update_plugin() {
diff --git a/plugins/plugin/help-functions b/plugins/plugin/help-functions
index 29087e0e7..408de0c62 100755
--- a/plugins/plugin/help-functions
+++ b/plugins/plugin/help-functions
@@ -29,7 +29,7 @@ fn-help-content() {
   cat <<help_content
     plugin:disable <name>, Disable an installed plugin (third-party only)
     plugin:enable <name>, Enable a previously disabled plugin
-    plugin:install [--core|--git-url] [--committish branch|commit|commit] [--name custom-plugin-name], Optionally download git-url (and pin to the specified branch/commit/tag) & run install trigger for active plugins (or only core ones)
+    plugin:install [--core|--git-url] [--committish branch|commit|commit] [--name custom-plugin-name] [--skip-install-trigger], Optionally download git-url (and pin to the specified branch/commit/tag) & run install trigger for active plugins (or only core ones)
     plugin:install-dependencies [--core], Run install-dependencies trigger for active plugins (or only core ones)
     plugin:list, Print active plugins
     plugin:trigger <args...>, Trigger an arbitrary plugin hook
diff --git a/plugins/plugin/subcommands/install b/plugins/plugin/subcommands/install
index ab3db3354..2f746f641 100755
--- a/plugins/plugin/subcommands/install
+++ b/plugins/plugin/subcommands/install
@@ -18,7 +18,6 @@ cmd-plugin-install() {
       ;;
     https:* | git* | ssh:* | file:* | *.tar.gz | *.tgz)
       download_and_enable_plugin "$@"
-      plugn trigger install
       ;;
     *)
       if [[ -n "$FLAG" ]]; then

From 691e4541856bbe668196caac381a01df43933e78 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 18 Nov 2025 13:02:23 +0000
Subject: [PATCH 178/427] chore(deps): bump google.golang.org/grpc in
 /tests/apps/gogrpc

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.76.0 to 1.77.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/go.mod | 10 ++++-----
 tests/apps/gogrpc/go.sum | 44 ++++++++++++++++++++--------------------
 2 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/tests/apps/gogrpc/go.mod b/tests/apps/gogrpc/go.mod
index b13bc3cec..d4e38a97a 100644
--- a/tests/apps/gogrpc/go.mod
+++ b/tests/apps/gogrpc/go.mod
@@ -3,10 +3,10 @@ module github.com/dokku/dokko/tests/apps/gorpc
 go 1.25.1
 
 require (
-	golang.org/x/net v0.42.0 // indirect
-	golang.org/x/sys v0.34.0 // indirect
-	golang.org/x/text v0.27.0 // indirect
-	google.golang.org/grpc v1.76.0
+	golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82 // indirect
+	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/text v0.30.0 // indirect
+	google.golang.org/grpc v1.77.0
 )
 
 require (
@@ -14,4 +14,4 @@ require (
 	google.golang.org/protobuf v1.36.10
 )
 
-require google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b // indirect
+require google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 // indirect
diff --git a/tests/apps/gogrpc/go.sum b/tests/apps/gogrpc/go.sum
index f7cfea27d..5f3decae8 100644
--- a/tests/apps/gogrpc/go.sum
+++ b/tests/apps/gogrpc/go.sum
@@ -8,30 +8,30 @@ github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA=
-go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A=
-go.opentelemetry.io/otel v1.37.0 h1:9zhNfelUvx0KBfu/gb+ZgeAfAgtWrfHJZcAqFC228wQ=
-go.opentelemetry.io/otel v1.37.0/go.mod h1:ehE/umFRLnuLa/vSccNq9oS1ErUlkkK71gMcN34UG8I=
-go.opentelemetry.io/otel/metric v1.37.0 h1:mvwbQS5m0tbmqML4NqK+e3aDiO02vsf/WgbsdpcPoZE=
-go.opentelemetry.io/otel/metric v1.37.0/go.mod h1:04wGrZurHYKOc+RKeye86GwKiTb9FKm1WHtO+4EVr2E=
-go.opentelemetry.io/otel/sdk v1.37.0 h1:ItB0QUqnjesGRvNcmAcU0LyvkVyGJ2xftD29bWdDvKI=
-go.opentelemetry.io/otel/sdk v1.37.0/go.mod h1:VredYzxUvuo2q3WRcDnKDjbdvmO0sCzOvVAiY+yUkAg=
-go.opentelemetry.io/otel/sdk/metric v1.37.0 h1:90lI228XrB9jCMuSdA0673aubgRobVZFhbjxHHspCPc=
-go.opentelemetry.io/otel/sdk/metric v1.37.0/go.mod h1:cNen4ZWfiD37l5NhS+Keb5RXVWZWpRE+9WyVCpbo5ps=
-go.opentelemetry.io/otel/trace v1.37.0 h1:HLdcFNbRQBE2imdSEgm/kwqmQj1Or1l/7bW6mxVK7z4=
-go.opentelemetry.io/otel/trace v1.37.0/go.mod h1:TlgrlQ+PtQO5XFerSPUYG0JSgGyryXewPGyayAWSBS0=
-golang.org/x/net v0.42.0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs=
-golang.org/x/net v0.42.0/go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8=
-golang.org/x/sys v0.34.0 h1:H5Y5sJ2L2JRdyv7ROF1he/lPdvFsd0mJHFw2ThKHxLA=
-golang.org/x/sys v0.34.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4=
-golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU=
+go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
+go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
+go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8=
+go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
+go.opentelemetry.io/otel/metric v1.38.0 h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA=
+go.opentelemetry.io/otel/metric v1.38.0/go.mod h1:kB5n/QoRM8YwmUahxvI3bO34eVtQf2i4utNVLr9gEmI=
+go.opentelemetry.io/otel/sdk v1.38.0 h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E=
+go.opentelemetry.io/otel/sdk v1.38.0/go.mod h1:ghmNdGlVemJI3+ZB5iDEuk4bWA3GkTpW+DOoZMYBVVg=
+go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM=
+go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA=
+go.opentelemetry.io/otel/trace v1.38.0 h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE=
+go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs=
+golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82 h1:6/3JGEh1C88g7m+qzzTbl3A0FtsLguXieqofVLU/JAo=
+golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
+golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
+golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
+golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
 gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
 gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b h1:zPKJod4w6F1+nRGDI9ubnXYhU9NSWoFAijkHkUXeTK8=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
-google.golang.org/grpc v1.76.0 h1:UnVkv1+uMLYXoIz6o7chp59WfQUYA2ex/BXQ9rHZu7A=
-google.golang.org/grpc v1.76.0/go.mod h1:Ju12QI8M6iQJtbcsV+awF5a4hfJMLi4X0JLo94ULZ6c=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 h1:M1rk8KBnUsBDg1oPGHNCxG4vc1f49epmTO7xscSajMk=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
+google.golang.org/grpc v1.77.0 h1:wVVY6/8cGA6vvffn+wWK5ToddbgdU3d8MNENr4evgXM=
+google.golang.org/grpc v1.77.0/go.mod h1:z0BY1iVj0q8E1uSQCjL9cppRj+gnZjzDnzV0dHhrNig=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236 h1:wTUkwrodi4IuWD3kYkMUwCU8BhwFaqDywrXmsthCvQA=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236/go.mod h1:j5uROIAAgi3YmtiETMt1LW0d/lHqQ7wwrIY4uGRXLQ4=
 google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE=

From d5ea97f7b096428d4f0034c8bca8b11675e02816 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 18 Nov 2025 14:07:09 -0500
Subject: [PATCH 179/427] chore: consolidate on single method to redirect
 stdout/stderr to /dev/null

---
 plugins/git/git-from-directory | 2 +-
 plugins/git/internal-functions | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugins/git/git-from-directory b/plugins/git/git-from-directory
index 771a7bba9..238fb297b 100755
--- a/plugins/git/git-from-directory
+++ b/plugins/git/git-from-directory
@@ -18,7 +18,7 @@ trigger-git-git-from-directory() {
   trap "rm -rf '$TMP_WORK_DIR' '$TMP_WORK_DIR_2' >/dev/null" RETURN INT TERM EXIT
 
   local has_code=false
-  if fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" >/dev/null 2>&1; then
+  if fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" &>/dev/null; then
     has_code=true
   fi
 
diff --git a/plugins/git/internal-functions b/plugins/git/internal-functions
index 0cd956750..5641cd923 100755
--- a/plugins/git/internal-functions
+++ b/plugins/git/internal-functions
@@ -211,7 +211,7 @@ cmd-git-sync() {
   DOKKU_DEPLOY_BRANCH="$(fn-git-deploy-branch "$APP")"
   CURRENT_REF="$(fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" 2>/dev/null || true)"
 
-  if ! fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" >/dev/null 2>&1; then
+  if ! fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" &>/dev/null; then
     dokku_log_info1_quiet "Cloning $APP from $GIT_REMOTE#$GIT_REF"
     fn-git-clone "$APP" "$GIT_REMOTE" "$GIT_REF"
   else
@@ -378,7 +378,7 @@ fn-git-clone() {
   [[ -z "$APP" ]] && dokku_log_fail "Please specify an app to run the command on"
 
   local DOKKU_DEPLOY_BRANCH="$(fn-git-deploy-branch "$APP")"
-  if fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" >/dev/null 2>&1; then
+  if fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" &>/dev/null; then
     dokku_log_fail "The clone subcommand can only be executed for new applications"
   fi
 
@@ -441,7 +441,7 @@ fn-git-fetch() {
   local APP_ROOT="$DOKKU_ROOT/$APP"
 
   local DOKKU_DEPLOY_BRANCH="$(fn-git-deploy-branch "$APP")"
-  if ! fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" >/dev/null 2>&1; then
+  if ! fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" &>/dev/null; then
     dokku_log_fail "The fetch subcommand can only be executed for existing applications"
   fi
 

From 99a1e2ee335e283672f67602ea61476395a5f3f8 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 18 Nov 2025 14:09:38 -0500
Subject: [PATCH 180/427] feat: default to running one-off k3s containers to a
 max of 1 day

This follows the standard enforced by Heroku.
---
 plugins/scheduler-k3s/template.go | 40 ++++++++++++++++---------------
 plugins/scheduler-k3s/triggers.go | 39 ++++++++++++++++++------------
 2 files changed, 45 insertions(+), 34 deletions(-)

diff --git a/plugins/scheduler-k3s/template.go b/plugins/scheduler-k3s/template.go
index dcc6060d8..4f57700ba 100644
--- a/plugins/scheduler-k3s/template.go
+++ b/plugins/scheduler-k3s/template.go
@@ -349,24 +349,25 @@ type ClusterIssuer struct {
 }
 
 type Job struct {
-	AppName          string
-	Command          []string
-	DeploymentID     int64
-	Entrypoint       string
-	Env              map[string]string
-	ID               string
-	Image            string
-	ImagePullSecrets string
-	ImageSourceType  string
-	Interactive      bool
-	Labels           map[string]string
-	Namespace        string
-	ProcessType      string
-	Schedule         string
-	SecurityContext  SecurityContext
-	Suffix           string
-	RemoveContainer  bool
-	WorkingDir       string
+	AppName               string
+	Command               []string
+	DeploymentID          int64
+	Entrypoint            string
+	Env                   map[string]string
+	ID                    string
+	Image                 string
+	ImagePullSecrets      string
+	ImageSourceType       string
+	Interactive           bool
+	Labels                map[string]string
+	Namespace             string
+	ProcessType           string
+	Schedule              string
+	SecurityContext       SecurityContext
+	Suffix                string
+	RemoveContainer       bool
+	WorkingDir            string
+	ActiveDeadlineSeconds int64
 }
 
 // SecurityContext contains the security context for a process
@@ -479,7 +480,8 @@ func templateKubernetesJob(input Job) (batchv1.Job, error) {
 			Annotations: annotations,
 		},
 		Spec: batchv1.JobSpec{
-			BackoffLimit: ptr.To(int32(0)),
+			ActiveDeadlineSeconds: ptr.To(input.ActiveDeadlineSeconds),
+			BackoffLimit:          ptr.To(int32(0)),
 			Template: corev1.PodTemplateSpec{
 				ObjectMeta: metav1.ObjectMeta{
 					Labels:      labels,
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index de2e9c2c9..1c12808ba 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -1329,23 +1329,32 @@ func TriggerSchedulerRun(scheduler string, appName string, envCount int, args []
 		return fmt.Errorf("Error getting security context: %w", err)
 	}
 
+	activeDeadlineSeconds := int64(86400) // 24 hours
+	if os.Getenv("DOKKU_RUN_TTL_SECONDS") != "" {
+		activeDeadlineSeconds, err = strconv.ParseInt(os.Getenv("DOKKU_RUN_TTL_SECONDS"), 10, 64)
+		if err != nil {
+			return fmt.Errorf("Error parsing DOKKU_RUN_TTL_SECONDS value as int64: %w", err)
+		}
+	}
+
 	workingDir := common.GetWorkingDir(appName, image)
 	job, err := templateKubernetesJob(Job{
-		AppName:          appName,
-		Command:          []string{commandShell},
-		DeploymentID:     deploymentID,
-		Entrypoint:       entrypoint,
-		Env:              extraEnv,
-		Image:            image,
-		ImagePullSecrets: imagePullSecrets,
-		ImageSourceType:  imageSourceType,
-		Interactive:      attachToPod || common.ToBool(os.Getenv("DOKKU_FORCE_TTY")),
-		Labels:           labels,
-		Namespace:        namespace,
-		ProcessType:      processType,
-		RemoveContainer:  rmContainer,
-		SecurityContext:  securityContext,
-		WorkingDir:       workingDir,
+		AppName:               appName,
+		Command:               []string{commandShell},
+		DeploymentID:          deploymentID,
+		Entrypoint:            entrypoint,
+		Env:                   extraEnv,
+		Image:                 image,
+		ImagePullSecrets:      imagePullSecrets,
+		ImageSourceType:       imageSourceType,
+		Interactive:           attachToPod || common.ToBool(os.Getenv("DOKKU_FORCE_TTY")),
+		Labels:                labels,
+		Namespace:             namespace,
+		ProcessType:           processType,
+		RemoveContainer:       rmContainer,
+		SecurityContext:       securityContext,
+		WorkingDir:            workingDir,
+		ActiveDeadlineSeconds: activeDeadlineSeconds,
 	})
 	if err != nil {
 		return fmt.Errorf("Error templating job: %w", err)

From a6d65c821f3b0e068703f065dbc67457923d2384 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 18 Nov 2025 16:45:52 -0500
Subject: [PATCH 181/427] feat: implement cron and one-off run task TTLs

Closes #7938
---
 docs/development/plugin-triggers.md           | 20 +++++
 docs/processes/one-off-tasks.md               | 14 ++-
 docs/processes/scheduled-cron-tasks.md        |  2 +
 plugins/ps/subcommands.go                     | 13 +++
 plugins/run/help-functions                    |  5 +-
 plugins/run/internal-functions                | 42 ++++++++-
 plugins/run/subcommands/retire                |  6 ++
 plugins/scheduler-docker-local/scheduler-run  |  4 +
 .../scheduler-docker-local/scheduler-run-list |  6 +-
 .../scheduler-run-retire                      | 86 +++++++++++++++++++
 .../templates/chart/cron-job.yaml             |  1 +
 tests/unit/run_1.bats                         | 42 +++++++++
 12 files changed, 233 insertions(+), 8 deletions(-)
 create mode 100755 plugins/run/subcommands/retire
 create mode 100755 plugins/scheduler-docker-local/scheduler-run-retire

diff --git a/docs/development/plugin-triggers.md b/docs/development/plugin-triggers.md
index 1d202951c..77788ad3b 100644
--- a/docs/development/plugin-triggers.md
+++ b/docs/development/plugin-triggers.md
@@ -2805,6 +2805,26 @@ DOKKU_SCHEDULER="$1"; APP="$2"; CONTAINER="$3"; TAIL="$4"; PRETTY_PRINT="$5"; NU
 # TODO
 ```
 
+### `scheduler-run-retire`
+
+> [!WARNING]
+> The scheduler plugin trigger apis are under development and may change
+> between minor releases until the 1.0 release.
+
+- Description: Allows you to retire containers started by the `run` command
+- Invoked by: `dokku run:retire`
+- Arguments: `$DOKKU_SCHEDULER $APP`
+- Example:
+
+```shell
+#!/usr/bin/env bash
+
+set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
+DOKKU_SCHEDULER="$1"; APP="$2";
+
+# TODO
+```
+
 ### `scheduler-run-stop`
 
 > [!WARNING]
diff --git a/docs/processes/one-off-tasks.md b/docs/processes/one-off-tasks.md
index 1df42652c..f3f699111 100644
--- a/docs/processes/one-off-tasks.md
+++ b/docs/processes/one-off-tasks.md
@@ -1,8 +1,8 @@
 # One-off Tasks
 
 ```
-run [-e|--env KEY=VALUE] [--no-tty] <app> <cmd>              # Run a command in a new container using the current app image
-run:detached [-e|-env KEY=VALUE] [--force-tty] <app> <cmd>         # Run a command in a new detached container using the current app image
+run [-e|--env KEY=VALUE] [--no-tty] [--ttl-seconds SECONDS] <app> <cmd>              # Run a command in a new container using the current app image
+run:detached [-e|-env KEY=VALUE] [--force-tty] [--ttl-seconds SECONDS] <app> <cmd>         # Run a command in a new detached container using the current app image
 run:list [--format json|stdout] [<app>]                      # List all run containers for an app
 run:logs <app|--container CONTAINER> [-h] [-t] [-n num] [-q] # Display recent log output for run containers
 run:stop <app|--container CONTAINER>                         # Stops all run containers for an app or a specified run container
@@ -29,6 +29,16 @@ dokku run --env "NODE_ENV=development" --env "PATH=/custom/path" node-js-app npm
 
 One off containers are removed at the end of process execution.
 
+In addition, one-off containers also run for a max of 24 hours (86400 seconds) by default, after which they are reaped. This can be changed by setting the `--ttl-seconds` argument:
+
+
+```shell
+# runs for 10 minutes
+dokku run --ttl-seconds 600 node-js-app npm run mytask
+```
+
+One-off containers that exceed their runtime are reaped every 5 minutes, so the ttl-seconds is an approximation and your app may end up running for up to 5 minutes longer than expected.
+
 #### Running Procfile commands
 
 The `run` command can also be used to run a command defined in the app `Procfile`:
diff --git a/docs/processes/scheduled-cron-tasks.md b/docs/processes/scheduled-cron-tasks.md
index 6ce3b5f71..e9473312d 100644
--- a/docs/processes/scheduled-cron-tasks.md
+++ b/docs/processes/scheduled-cron-tasks.md
@@ -43,6 +43,8 @@ A cron task takes the following properties:
 
 Zero or more cron tasks can be specified per app. Cron tasks are validated after the build artifact is created but before the app is deployed, and the cron schedule is updated during the post-deploy phase.
 
+Cron tasks can run for a maximum of 24 hours via the docker-local scheduler, after which they are reaped from the system.
+
 See the [app.json location documentation](/docs/advanced-usage/deployment-tasks.md#changing-the-appjson-location) for more information on where to place your `app.json` file.
 
 #### Task Environment
diff --git a/plugins/ps/subcommands.go b/plugins/ps/subcommands.go
index 783a26161..c95f05d74 100644
--- a/plugins/ps/subcommands.go
+++ b/plugins/ps/subcommands.go
@@ -142,6 +142,19 @@ func CommandRetire(appName string) error {
 		Args:        []string{scheduler, appName},
 		StreamStdio: true,
 	})
+	if err != nil {
+		return fmt.Errorf("Error retiring containers: %w", err)
+	}
+
+	common.LogInfo1("Retiring expired run containers")
+	_, err = common.CallPlugnTrigger(common.PlugnTriggerInput{
+		Trigger:     "scheduler-run-retire",
+		StreamStdio: true,
+	})
+	if err != nil {
+		return fmt.Errorf("Error retiring expired run containers: %w", err)
+	}
+
 	return err
 }
 
diff --git a/plugins/run/help-functions b/plugins/run/help-functions
index d145031ae..6db9b0eeb 100755
--- a/plugins/run/help-functions
+++ b/plugins/run/help-functions
@@ -27,10 +27,11 @@ help_desc
 fn-help-content() {
   declare desc="return help content"
   cat <<help_content
-    run [-e|--env KEY=VALUE] [--no-tty] <app> <cmd>, Run a command in a new container using the current app image
-    run:detached [-e|-env KEY=VALUE] [--force-tty] <app> <cmd>, Run a command in a new detached container using the current app image
+    run [-e|--env KEY=VALUE] [--no-tty] [--ttl-seconds SECONDS] <app> <cmd>, Run a command in a new container using the current app image
+    run:detached [-e|-env KEY=VALUE] [--force-tty] [--ttl-seconds SECONDS] <app> <cmd>, Run a command in a new detached container using the current app image
     run:list [--format json|stdout] <app>, List all run containers for an app
     run:logs <app|--container CONTAINER> [-h] [-t] [-n num] [-q], Display recent log output for run containers
+    run:retire [<app>], Stop all run containers for an app that have exceeded their active deadline
     run:stop <app|--container CONTAINER>, Stops all run containers for an app or a specified run container
 help_content
 }
diff --git a/plugins/run/internal-functions b/plugins/run/internal-functions
index fe45b1790..e23ada445 100755
--- a/plugins/run/internal-functions
+++ b/plugins/run/internal-functions
@@ -9,7 +9,7 @@ fn-run() {
   shift 1
 
   declare APP=""
-  local CRON_ID CONCURRENCY_POLICY="allow"
+  local CRON_ID CONCURRENCY_POLICY="allow" DOKKU_RUN_TTL_SECONDS="86400"
   declare -a RUN_ENV
   RUN_ENV=()
   while [[ $# -gt 0 ]]; do
@@ -61,6 +61,19 @@ fn-run() {
         RUN_ENV+=("$2")
         shift 2
         ;;
+      --ttl-seconds=*)
+        local arg=$(printf "%s" "$1" | sed -E 's/(^--ttl-seconds=)//g')
+        DOKKU_RUN_TTL_SECONDS="$arg"
+        shift
+        ;;
+      --ttl-seconds)
+        if [[ ! $2 ]]; then
+          dokku_log_warn "expected $1 to have an argument"
+          break
+        fi
+        DOKKU_RUN_TTL_SECONDS="$2"
+        shift 2
+        ;;
       *)
         APP="$1"
         shift
@@ -69,6 +82,10 @@ fn-run() {
     esac
   done
 
+  if [[ -z "$DOKKU_RUN_TTL_SECONDS" ]]; then
+    DOKKU_RUN_TTL_SECONDS="86400"
+  fi
+
   if [[ "$CMD" == "run:detached" ]] && [[ "$DOKKU_FORCE_TTY" != "true" ]]; then
     export DOKKU_DISABLE_TTY=true
   fi
@@ -80,7 +97,7 @@ fn-run() {
   verify_app_name "$APP"
 
   local DOKKU_SCHEDULER=$(get_app_scheduler "$APP")
-  DOKKU_CRON_ID="$CRON_ID" DOKKU_CONCURRENCY_POLICY="$CONCURRENCY_POLICY" plugn trigger scheduler-run "$DOKKU_SCHEDULER" "$APP" "${#RUN_ENV[@]}" "${RUN_ENV[@]}" -- "$@"
+  DOKKU_CRON_ID="$CRON_ID" DOKKU_CONCURRENCY_POLICY="$CONCURRENCY_POLICY" DOKKU_RUN_TTL_SECONDS="$DOKKU_RUN_TTL_SECONDS" plugn trigger scheduler-run "$DOKKU_SCHEDULER" "$APP" "${#RUN_ENV[@]}" "${RUN_ENV[@]}" -- "$@"
 }
 
 cmd-run() {
@@ -124,6 +141,10 @@ cmd-run-list() {
         FORMAT="$2"
         shift 2
         ;;
+      --quiet)
+        export DOKKU_QUIET_OUTPUT=true
+        shift
+        ;;
       *)
         APP="$1"
         shift
@@ -201,8 +222,23 @@ cmd-run-logs() {
   plugn trigger scheduler-run-logs "$DOKKU_SCHEDULER" "$APP" "$CONTAINER_NAME" "$TAIL" "$PRETTY_PRINT" "$NUM"
 }
 
+cmd-run-retire() {
+  declare desc="stop all run containers that have exceeded their active deadline"
+  declare cmd="run:retire"
+  [[ "$1" == "$cmd" ]] && shift 1
+  declare APP="$1"
+
+  if [[ -z "$APP" ]]; then
+    plugn trigger scheduler-run-retire
+  else
+    verify_app_name "$APP"
+    local DOKKU_SCHEDULER="$(get_app_scheduler "$APP")"
+    plugn trigger scheduler-run-retire "$DOKKU_SCHEDULER" "$APP"
+  fi
+}
+
 cmd-run-stop() {
-  declare desc="Stops all run containers for an app or a specified run container"
+  declare desc="stops all run containers for an app or a specified run container"
   declare cmd="run:stop"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP CONTAINER_NAME
diff --git a/plugins/run/subcommands/retire b/plugins/run/subcommands/retire
new file mode 100755
index 000000000..31d9953f0
--- /dev/null
+++ b/plugins/run/subcommands/retire
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -eo pipefail
+source "$PLUGIN_AVAILABLE_PATH/run/internal-functions"
+[[ $DOKKU_TRACE ]] && set -x
+
+cmd-run-retire "$@"
diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index b6c41510a..4586db936 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -119,6 +119,10 @@ trigger-scheduler-docker-local-scheduler-run() {
     DOCKER_ARGS+=" --platform=linux/amd64"
   fi
 
+  if [[ -n "$DOKKU_RUN_TTL_SECONDS" ]]; then
+    DOCKER_ARGS+=" --label=com.dokku.active-deadline-seconds=$DOKKU_RUN_TTL_SECONDS"
+  fi
+
   # shellcheck disable=SC2124
   DOCKER_ARGS+=" --label=com.dokku.container-type=$PROCESS_TYPE"
   DOCKER_ARGS+=" --label=com.dokku.app-name=$APP"
diff --git a/plugins/scheduler-docker-local/scheduler-run-list b/plugins/scheduler-docker-local/scheduler-run-list
index 2f4ad57b3..fb5366d62 100755
--- a/plugins/scheduler-docker-local/scheduler-run-list
+++ b/plugins/scheduler-docker-local/scheduler-run-list
@@ -15,7 +15,11 @@ trigger-scheduler-docker-local-scheduler-run-list() {
 
   if [[ "$FORMAT" == "stdout" ]]; then
     dokku_log_info2_quiet "$APP run containers"
-    "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "table {{.Names}}\t{{.Command}}\t{{.RunningFor}}"
+    if [[ -n "$DOKKU_QUIET_OUTPUT" ]]; then
+      "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "{{.Names}}\t{{.Command}}\t{{.RunningFor}}"
+    else
+      "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "table {{.Names}}\t{{.Command}}\t{{.RunningFor}}"
+      fi
   else
     "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "{{ json . }}" | jq -s -M 'map({name: .Names, state:.State, command:.Command, created_at:.CreatedAt})'
   fi
diff --git a/plugins/scheduler-docker-local/scheduler-run-retire b/plugins/scheduler-docker-local/scheduler-run-retire
new file mode 100755
index 000000000..fe6d3b5f9
--- /dev/null
+++ b/plugins/scheduler-docker-local/scheduler-run-retire
@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+source "$PLUGIN_AVAILABLE_PATH/config/functions"
+source "$PLUGIN_AVAILABLE_PATH/scheduler-docker-local/internal-functions"
+
+fn-scheduler-docker-local-run-retire-container() {
+  declare desc="stop a container"
+  declare CONTAINER_ID="$1"
+
+  local DOKKU_DOCKER_STOP_TIMEOUT="$(plugn trigger ps-get-property "$APP" stop-timeout-seconds || true)"
+
+  [[ -n "$DOKKU_DOCKER_STOP_TIMEOUT" ]] && DOCKER_STOP_TIME_ARG="--time=${DOKKU_DOCKER_STOP_TIMEOUT}"
+
+  "$DOCKER_BIN" container update --restart=no "$CONTAINER_ID" &>/dev/null || true
+  "$DOCKER_BIN" container stop $DOCKER_STOP_TIME_ARG "$CONTAINER_ID" &>/dev/null || true
+  "$DOCKER_BIN" container kill "$CONTAINER_ID" &>/dev/null || true
+  "$DOCKER_BIN" container rm "$CONTAINER_ID" &>/dev/null || true
+
+  if "$DOCKER_BIN" container inspect "$CONTAINER_ID" &>/dev/null; then
+    dokku_log_warn "Unable to retire container ${CONTAINER_ID}"
+    return 1
+  fi
+}
+
+fn-scheduler-docker-local-run-retire() {
+  declare desc="stop all run containers that have exceeded their active deadline"
+  declare APP="$1"
+  local containers=""
+
+  # find all run containers for the specified app
+  container_type_filter="label=com.dokku.container-type=run"
+  if [[ -n "$APP" ]]; then
+    app_filter="label=com.dokku.app-name=$APP"
+    containers="$("$DOCKER_BIN" container ls --filter "$container_type_filter" --filter "$app_filter" --format '{{.ID}} {{.CreatedAt}}')"
+  else
+    containers="$("$DOCKER_BIN" container ls --filter "$container_type_filter" --format '{{.ID}} {{.CreatedAt}}')"
+  fi
+
+  if [[ -z "$containers" ]]; then
+    return
+  fi
+
+  # iterate over all containers, ignoring the timezone in the last two columns
+  echo "$containers" | awk '{NF-=2} 1' | while read -r container_id container_date container_time; do
+    # get the cutoff time in seconds from the container's `com.dokku.active-deadline-seconds` label
+    active_deadline_seconds="$("$DOCKER_BIN" container inspect "$container_id" --format '{{ index .Config.Labels "com.dokku.active-deadline-seconds" }}')"
+    if [[ -z "$active_deadline_seconds" ]]; then
+      continue
+    fi
+
+    # convert the active deadline seconds to a unix timestamp
+    cutoff_time="$(date --date="$active_deadline_seconds seconds ago" "+%s")"
+
+    # convert the container start time to unix timestamp
+    start_time="$(date --date="$container_date $container_time" "+%s")"
+
+    # if the container start time is before the cutoff time, stop the container
+    if [[ "$start_time" -lt "$cutoff_time" ]]; then
+      dokku_log_verbose_quiet "Retiring container ${container_id}"
+      fn-scheduler-docker-local-run-retire-container "$container_id"
+    fi
+  done
+}
+
+trigger-scheduler-docker-local-scheduler-run-retire() {
+  declare desc="retires all run containers for an app that have exceeded their active deadline"
+  declare trigger="scheduler-run-retire"
+  declare DOKKU_SCHEDULER="$1" APP="$2"
+
+  if [[ -z "$DOKKU_SCHEDULER" ]]; then
+    dokku_log_info1_quiet "Retiring all run containers"
+    fn-scheduler-docker-local-run-retire
+    return "$?"
+  fi
+
+  if [[ "$DOKKU_SCHEDULER" != "docker-local" ]]; then
+    return
+  fi
+
+  dokku_log_info1_quiet "Retiring run containers for app ${APP}"
+  fn-scheduler-docker-local-run-retire "$APP"
+}
+
+trigger-scheduler-docker-local-scheduler-run-retire "$@"
diff --git a/plugins/scheduler-k3s/templates/chart/cron-job.yaml b/plugins/scheduler-k3s/templates/chart/cron-job.yaml
index 102b3ce1e..4771674eb 100644
--- a/plugins/scheduler-k3s/templates/chart/cron-job.yaml
+++ b/plugins/scheduler-k3s/templates/chart/cron-job.yaml
@@ -50,6 +50,7 @@ spec:
       backoffLimit: 0
       podReplacementPolicy: Failed
       ttlSecondsAfterFinished: 60
+      activeDeadlineSeconds: 86400
       template:
         metadata:
           annotations:
diff --git a/tests/unit/run_1.bats b/tests/unit/run_1.bats
index 913b6de2c..69faaa475 100644
--- a/tests/unit/run_1.bats
+++ b/tests/unit/run_1.bats
@@ -98,3 +98,45 @@ teardown() {
   echo "status: $status"
   assert_success
 }
+
+@test "(run) run:retire" {
+  run deploy_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run:detached --ttl-seconds=1 $TEST_APP sleep 300"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  container_id="$output"
+
+  # check the labels on the container to ensure the active deadline seconds is set
+  run /bin/bash -c "docker container inspect $container_id --format '{{ index .Config.Labels \"com.dokku.active-deadline-seconds\" }}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "1"
+
+  run /bin/bash -c "dokku run:list --quiet $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "$container_id"
+
+  run /bin/bash -c "sleep 2"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run:retire"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run:list --quiet $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "$container_id"
+}
\ No newline at end of file

From 992b023bc8751f3d09cb9e4c7f860f437b3f31e7 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 18 Nov 2025 17:06:28 -0500
Subject: [PATCH 182/427] chore: fix lint issues

---
 plugins/scheduler-docker-local/scheduler-run-list | 2 +-
 tests/unit/run_1.bats                             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/scheduler-docker-local/scheduler-run-list b/plugins/scheduler-docker-local/scheduler-run-list
index fb5366d62..93c7cc229 100755
--- a/plugins/scheduler-docker-local/scheduler-run-list
+++ b/plugins/scheduler-docker-local/scheduler-run-list
@@ -19,7 +19,7 @@ trigger-scheduler-docker-local-scheduler-run-list() {
       "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "{{.Names}}\t{{.Command}}\t{{.RunningFor}}"
     else
       "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "table {{.Names}}\t{{.Command}}\t{{.RunningFor}}"
-      fi
+    fi
   else
     "$DOCKER_BIN" container ls --all --no-trunc --filter "label=com.dokku.app-name=$APP" --filter "label=com.dokku.container-type=run" --format "{{ json . }}" | jq -s -M 'map({name: .Names, state:.State, command:.Command, created_at:.CreatedAt})'
   fi
diff --git a/tests/unit/run_1.bats b/tests/unit/run_1.bats
index 69faaa475..91fda6ce9 100644
--- a/tests/unit/run_1.bats
+++ b/tests/unit/run_1.bats
@@ -139,4 +139,4 @@ teardown() {
   echo "status: $status"
   assert_success
   assert_output_not_contains "$container_id"
-}
\ No newline at end of file
+}

From 44b87ffe8d2ad4090d03f891a118d6d053b157d9 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 20:18:40 -0500
Subject: [PATCH 183/427] tests: fix expected output of --quiet

---
 tests/unit/run_2.bats | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/tests/unit/run_2.bats b/tests/unit/run_2.bats
index d6f8e860a..bd461aa31 100644
--- a/tests/unit/run_2.bats
+++ b/tests/unit/run_2.bats
@@ -112,12 +112,11 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  # includes headers
   run /bin/bash -c "dokku --quiet run:list $TEST_APP | wc -l"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "2"
+  assert_output "1"
 
   run /bin/bash -c "dokku run:list $TEST_APP --format json | jq '. | length'"
   echo "output: $output"
@@ -136,12 +135,11 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  # includes headers
   run /bin/bash -c "dokku --quiet run:list $TEST_APP | wc -l"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "3"
+  assert_output "2"
 
   run /bin/bash -c "dokku run:list $TEST_APP --format json | jq '. | length'"
   echo "output: $output"

From 6f095271e1576d2d512a1fcfe6ef863c4c3f3c45 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 20:34:51 -0500
Subject: [PATCH 184/427] fix: ensure we can execute run commands when exec is
 executed as part of an entrypoint

Closes #8052
---
 plugins/scheduler-docker-local/scheduler-run |  3 +-
 tests/apps/python/exec-entrypoint.sh         |  4 +++
 tests/apps/python/exec.Dockerfile            | 11 ++++++++
 tests/apps/python/exec.Procfile              |  1 +
 tests/unit/builder-dockerfile.bats           | 29 ++++++++++++++++++++
 5 files changed, 47 insertions(+), 1 deletion(-)
 create mode 100755 tests/apps/python/exec-entrypoint.sh
 create mode 100644 tests/apps/python/exec.Dockerfile
 create mode 100644 tests/apps/python/exec.Procfile

diff --git a/plugins/scheduler-docker-local/scheduler-run b/plugins/scheduler-docker-local/scheduler-run
index b6c41510a..781f45372 100755
--- a/plugins/scheduler-docker-local/scheduler-run
+++ b/plugins/scheduler-docker-local/scheduler-run
@@ -109,7 +109,8 @@ trigger-scheduler-docker-local-scheduler-run() {
     if [[ -n "$PROC_CMD" ]]; then
       dokku_log_info1_quiet "Found '$POTENTIAL_PROCFILE_KEY' in Procfile, running that command"
       DOCKER_ARGS+=" --label=com.dokku.process-type=$POTENTIAL_PROCFILE_KEY"
-      set -- "$PROC_CMD" "${@:2}"
+      read -ra proc_array <<<"$PROC_CMD"
+      set -- "${proc_array[@]}" "${@:2}"
     fi
   fi
 
diff --git a/tests/apps/python/exec-entrypoint.sh b/tests/apps/python/exec-entrypoint.sh
new file mode 100755
index 000000000..7efc2e17d
--- /dev/null
+++ b/tests/apps/python/exec-entrypoint.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+set -o pipefail
+
+exec "$@"
diff --git a/tests/apps/python/exec.Dockerfile b/tests/apps/python/exec.Dockerfile
new file mode 100644
index 000000000..c45a63d20
--- /dev/null
+++ b/tests/apps/python/exec.Dockerfile
@@ -0,0 +1,11 @@
+FROM python:3.12.6-bookworm
+
+EXPOSE 3001/udp
+EXPOSE  3000/tcp
+EXPOSE 3003
+
+COPY . /app
+
+WORKDIR /app
+
+ENTRYPOINT ["/app/exec-entrypoint.sh"]
diff --git a/tests/apps/python/exec.Procfile b/tests/apps/python/exec.Procfile
new file mode 100644
index 000000000..69af14128
--- /dev/null
+++ b/tests/apps/python/exec.Procfile
@@ -0,0 +1 @@
+task: echo 'hi dokku'
diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index 569f6a914..5a5b0f3db 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -51,6 +51,35 @@ teardown() {
   assert_output_contains 'echo hi' 0
 }
 
+@test "(builder-dockerfile) exec" {
+  run /bin/bash -c "dokku builder-dockerfile:set $TEST_APP dockerfile-path exec.Dockerfile"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku app-json:set $TEST_APP appjson-path app.json-fake"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:set $TEST_APP procfile-path exec.Procfile"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP task"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Found 'task' in Procfile, running that command"
+  assert_output_contains 'hi dokku'
+}
+
 @test "(builder-dockerfile) config export" {
   run /bin/bash -c "dokku config:set $TEST_APP GITHUB_TOKEN=custom-value"
   echo "output: $output"

From a2d399c1048433d2d26a4a83c960e9e6ec2f76f3 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 00:21:40 -0500
Subject: [PATCH 185/427] fix: do not reset manually set port mappings when
 upgrading dokku

Closes #8067
---
 plugins/nginx-vhosts/pre-disable-vhost | 30 +++++++++-
 plugins/nginx-vhosts/pre-enable-vhost  | 30 +++++++++-
 tests/unit/ports.bats                  | 76 ++++++++++++++++++++++++++
 3 files changed, 130 insertions(+), 6 deletions(-)

diff --git a/plugins/nginx-vhosts/pre-disable-vhost b/plugins/nginx-vhosts/pre-disable-vhost
index ecfba935c..4aa94cec9 100755
--- a/plugins/nginx-vhosts/pre-disable-vhost
+++ b/plugins/nginx-vhosts/pre-disable-vhost
@@ -9,10 +9,34 @@ trigger-nginx-vhosts-pre-disable-vhost() {
   declare trigger="pre-disable-vhost"
   declare APP="$1"
 
-  if [[ "$(plugn trigger proxy-type "$APP")" == "nginx" ]]; then
-    DOKKU_QUIET_OUTPUT=1 config_unset --no-restart "$APP" DOKKU_PROXY_PORT DOKKU_PROXY_SSL_PORT
-    plugn trigger ports-clear "$APP"
+  if [[ "$(plugn trigger proxy-type "$APP")" != "nginx" ]]; then
+    return
   fi
+
+  # only clear ports if they are port 80 or 443
+  local PROXY_PORT=$(config_get "$APP" DOKKU_PROXY_PORT)
+  local PROXY_SSL_PORT=$(config_get "$APP" DOKKU_PROXY_SSL_PORT)
+
+  ports_to_clear=()
+  if [[ "$PROXY_PORT" == "80" ]]; then
+    ports_to_clear+=("DOKKU_PROXY_PORT")
+  fi
+  if [[ "$PROXY_SSL_PORT" == "443" ]]; then
+    ports_to_clear+=("DOKKU_PROXY_SSL_PORT")
+  fi
+
+  if [[ "${#ports_to_clear[@]}" -gt 0 ]]; then
+    DOKKU_QUIET_OUTPUT=1 config_unset --no-restart "$APP" "${ports_to_clear[@]}"
+  fi
+
+  # clear ports if there is a mapping starting with http:80 or https:443
+  local PORT_MAPS=$(plugn trigger ports-get "$APP")
+  for PORT_MAP in $PORT_MAPS; do
+    if [[ "$PORT_MAP" == "http:80:"* ]] || [[ "$PORT_MAP" == "https:443:"* ]]; then
+      plugn trigger ports-clear "$APP"
+      break
+    fi
+  done
 }
 
 trigger-nginx-vhosts-pre-disable-vhost "$@"
diff --git a/plugins/nginx-vhosts/pre-enable-vhost b/plugins/nginx-vhosts/pre-enable-vhost
index 64808eb3d..c8a7f4e56 100755
--- a/plugins/nginx-vhosts/pre-enable-vhost
+++ b/plugins/nginx-vhosts/pre-enable-vhost
@@ -9,10 +9,34 @@ trigger-nginx-vhosts-pre-enable-vhost() {
   declare trigger="pre-enable-vhost"
   declare APP="$1"
 
-  if [[ "$(plugn trigger proxy-type "$APP")" == "nginx" ]]; then
-    DOKKU_QUIET_OUTPUT=1 config_unset --no-restart "$APP" DOKKU_PROXY_PORT DOKKU_PROXY_SSL_PORT
-    plugn trigger ports-clear "$APP"
+  if [[ "$(plugn trigger proxy-type "$APP")" != "nginx" ]]; then
+    return
   fi
+
+  # only clear ports if they are port 80 or 443
+  local PROXY_PORT=$(config_get "$APP" DOKKU_PROXY_PORT)
+  local PROXY_SSL_PORT=$(config_get "$APP" DOKKU_PROXY_SSL_PORT)
+
+  ports_to_clear=()
+  if [[ "$PROXY_PORT" == "80" ]]; then
+    ports_to_clear+=("DOKKU_PROXY_PORT")
+  fi
+  if [[ "$PROXY_SSL_PORT" == "443" ]]; then
+    ports_to_clear+=("DOKKU_PROXY_SSL_PORT")
+  fi
+
+  if [[ "${#ports_to_clear[@]}" -gt 0 ]]; then
+    DOKKU_QUIET_OUTPUT=1 config_unset --no-restart "$APP" "${ports_to_clear[@]}"
+  fi
+
+  # clear ports if there is a mapping starting with http:80 or https:443
+  local PORT_MAPS=$(plugn trigger ports-get "$APP")
+  for PORT_MAP in $PORT_MAPS; do
+    if [[ "$PORT_MAP" == "http:80:"* ]] || [[ "$PORT_MAP" == "https:443:"* ]]; then
+      plugn trigger ports-clear "$APP"
+      break
+    fi
+  done
 }
 
 trigger-nginx-vhosts-pre-enable-vhost "$@"
diff --git a/tests/unit/ports.bats b/tests/unit/ports.bats
index e82b79711..e80821b98 100644
--- a/tests/unit/ports.bats
+++ b/tests/unit/ports.bats
@@ -294,3 +294,79 @@ teardown() {
   assert_success
   assert_output "http:3000:3000"
 }
+
+@test "(ports) ports not reinitialized on upgrade" {
+  run /bin/bash -c "dokku domains:clear-global"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku domains:disable $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ports:add $TEST_APP http:3001:3001"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku checks:disable $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku domains:report $TEST_APP --domains-global-enabled"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "false"
+
+  run /bin/bash -c "dokku git:from-image $TEST_APP louislam/uptime-kuma:2"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ports:report $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ports:report $TEST_APP --ports-map"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "http:3001:3001"
+
+  run /bin/bash -c "dokku ports:report $TEST_APP --ports-map-detected"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "http:3001:3001"
+
+  run /bin/bash -c "dokku domains:report $TEST_APP --domains-global-enabled"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "false"
+
+  run /bin/bash -c "dokku domains:setup $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Global server virtual host not set, disabling app vhost"
+  assert_output_not_contains "No port set, setting to random open high port"
+  assert_output_not_contains "Random port"
+
+  run /bin/bash -c "dokku ports:report $TEST_APP --ports-map"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "http:3001:3001"
+
+  run /bin/bash -c "dokku ports:report $TEST_APP --ports-map-detected"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "http:3001:3001"
+}

From 1c0ce250dc7f5f60c6f87c8168652712b8f30e7d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 17 Nov 2025 00:26:05 -0500
Subject: [PATCH 186/427] feat: support inline comments for app.json

Closes #8007
---
 docs/appendices/0.37.0-migration-guide.md |  4 ++++
 plugins/app-json/appjson.go               |  2 +-
 plugins/app-json/go.mod                   |  5 +++++
 plugins/app-json/go.sum                   | 15 ++++++++++++++-
 plugins/cron/go.mod                       |  5 +++++
 plugins/cron/go.sum                       | 15 ++++++++++++++-
 plugins/scheduler-docker-local/go.mod     |  6 +++++-
 plugins/scheduler-docker-local/go.sum     | 12 ++++++++++++
 plugins/scheduler-k3s/go.mod              |  2 ++
 plugins/scheduler-k3s/go.sum              |  4 ++++
 10 files changed, 66 insertions(+), 4 deletions(-)

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
index 6aa474994..ac01fa70f 100644
--- a/docs/appendices/0.37.0-migration-guide.md
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -1,5 +1,9 @@
 # 0.36.0 Migration Guide
 
+## Changes
+
+- The `app.json` file format is now parsed as JSONC and supports inline comments.
+
 ## Removals
 
 - Support for the `DOKKU_DOCKERFILE_CACHE_BUILD` environment variable has been removed. Use the `docker-options` plugin to set build arguments for your app instead.
diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index fe59c9942..ff7394ba4 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -1,13 +1,13 @@
 package appjson
 
 import (
-	"encoding/json"
 	"fmt"
 	"math"
 	"os"
 	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
+	json "github.com/marcozac/go-jsonc"
 	"k8s.io/utils/ptr"
 )
 
diff --git a/plugins/app-json/go.mod b/plugins/app-json/go.mod
index 61ab3d8d0..5fa492f18 100644
--- a/plugins/app-json/go.mod
+++ b/plugins/app-json/go.mod
@@ -5,6 +5,7 @@ go 1.25.1
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
+	github.com/marcozac/go-jsonc v0.1.1
 	github.com/spf13/pflag v1.0.10
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e
 )
@@ -12,12 +13,16 @@ require (
 require (
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
 	github.com/fatih/color v1.18.0 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/hashicorp/errwrap v1.0.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kr/fs v0.1.0 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/melbahja/goph v1.4.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/otiai10/copy v1.14.1 // indirect
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index 7276659c5..2dd1643df 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -5,16 +5,23 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
+github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
+github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
+github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -22,6 +29,10 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
 github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
@@ -39,8 +50,10 @@ github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFo
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
diff --git a/plugins/cron/go.mod b/plugins/cron/go.mod
index bc5330303..94de2ee13 100644
--- a/plugins/cron/go.mod
+++ b/plugins/cron/go.mod
@@ -15,13 +15,18 @@ require (
 require (
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
 	github.com/fatih/color v1.18.0 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/hashicorp/errwrap v1.0.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
 	github.com/kr/fs v0.1.0 // indirect
+	github.com/marcozac/go-jsonc v0.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/melbahja/goph v1.4.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/otiai10/copy v1.14.1 // indirect
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index 83cad516d..5dc995815 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -7,12 +7,17 @@ github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
+github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
@@ -21,6 +26,8 @@ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
+github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -28,6 +35,10 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
@@ -51,8 +62,10 @@ github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFo
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
diff --git a/plugins/scheduler-docker-local/go.mod b/plugins/scheduler-docker-local/go.mod
index 5fc84d9f3..d9ffce405 100644
--- a/plugins/scheduler-docker-local/go.mod
+++ b/plugins/scheduler-docker-local/go.mod
@@ -13,20 +13,24 @@ require (
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
 	github.com/dokku/dokku/plugins/app-json v0.0.0-00010101000000-000000000000 // indirect
 	github.com/fatih/color v1.18.0 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/hashicorp/errwrap v1.0.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
 	github.com/kr/fs v0.1.0 // indirect
+	github.com/marcozac/go-jsonc v0.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/melbahja/goph v1.4.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/otiai10/copy v1.14.1 // indirect
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	github.com/stretchr/testify v1.8.4 // indirect
 	golang.org/x/crypto v0.43.0 // indirect
 	golang.org/x/sys v0.37.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index 7e63a2e6c..1e0a7552c 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -7,12 +7,17 @@ github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
+github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
@@ -21,6 +26,8 @@ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
+github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -28,6 +35,10 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
@@ -49,6 +60,7 @@ github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7
 github.com/ryanuber/columnize v2.1.2+incompatible h1:C89EOx/XBWwIXl8wm8OPJBd7kPF25UfsK2X7Ph/zCAk=
 github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 79ce1f627..8b812d8a8 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -75,6 +75,7 @@ require (
 	github.com/go-openapi/swag v0.23.1 // indirect
 	github.com/go-openapi/swag/jsonname v0.25.1 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
+	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
@@ -100,6 +101,7 @@ require (
 	github.com/lib/pq v1.10.9 // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
+	github.com/marcozac/go-jsonc v0.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-runewidth v0.0.16 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index baa72c657..dfd077a48 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -134,6 +134,8 @@ github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1v
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
+github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4=
+github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
 github.com/gofrs/flock v0.13.0 h1:95JolYOvGMqeH31+FC7D2+uULf6mG61mEZ/A8dRYMzw=
 github.com/gofrs/flock v0.13.0/go.mod h1:jxeyy9R1auM5S6JYDBhDt+E2TCo7DkratH4Pgi8P+Z0=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
@@ -221,6 +223,8 @@ github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de h1:9TO3cAIGXtEhn
 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de/go.mod h1:zAbeS9B/r2mtpb6U+EI2rYA5OAXxsYw6wTamcNW+zcE=
 github.com/mailru/easyjson v0.9.0 h1:PrnmzHw7262yW8sTBwxi1PdJA3Iw/EKBa8psRf7d9a4=
 github.com/mailru/easyjson v0.9.0/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUto+XFtTU=
+github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
+github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
 github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=

From a05b79e2a98555f271a9bf36c1346b5d815f439e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 17 Nov 2025 00:28:04 -0500
Subject: [PATCH 187/427] tests: add inline comments on the python app.json
 file

This is the most-used app and therefore most-used app.json file, so this should allow us to test that moving to a new json parser works as expected.
---
 tests/apps/python/app.json | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/apps/python/app.json b/tests/apps/python/app.json
index 698956d99..246998f6f 100644
--- a/tests/apps/python/app.json
+++ b/tests/apps/python/app.json
@@ -14,7 +14,9 @@
   },
   "scripts": {
     "dokku": {
+      // this is a comment for the postdeploy script
       "postdeploy": "touch /app/postdeploy.test",
+      // this is a comment for the predeploy script
       "predeploy": "touch /app/predeploy.test"
     }
   }

From 38505006e8e7f09c5778ceb364e2f33555dafe54 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 17 Nov 2025 04:19:21 -0500
Subject: [PATCH 188/427] fix: correctly sanitize comments out of the jsonc
 content

---
 plugins/app-json/appjson.go | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index ff7394ba4..a85111889 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -1,13 +1,14 @@
 package appjson
 
 import (
+	"encoding/json"
 	"fmt"
 	"math"
 	"os"
 	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
-	json "github.com/marcozac/go-jsonc"
+	"github.com/marcozac/go-jsonc"
 	"k8s.io/utils/ptr"
 )
 
@@ -262,8 +263,13 @@ func ReadAppJSON(path string) (AppJSON, error) {
 		return AppJSON{}, nil
 	}
 
+	data, err := jsonc.Sanitize(b)
+	if err != nil {
+		return AppJSON{}, fmt.Errorf("Cannot sanitize app.json: %v", err)
+	}
+
 	var appJSON AppJSON
-	if err = json.Unmarshal(b, &appJSON); err != nil {
+	if err = json.Unmarshal(data, &appJSON); err != nil {
 		return AppJSON{}, fmt.Errorf("Cannot parse app.json: %v", err)
 	}
 

From 421863f4ac7243308f2bbcd9a68ab9a22a51be3c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 18 Nov 2025 01:41:52 -0500
Subject: [PATCH 189/427] fix: sanitize app.json in trigger

---
 plugins/app-json/triggers.go | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/plugins/app-json/triggers.go b/plugins/app-json/triggers.go
index 06b5126e0..7f23273e9 100644
--- a/plugins/app-json/triggers.go
+++ b/plugins/app-json/triggers.go
@@ -1,9 +1,9 @@
 package appjson
 
 import (
+	"encoding/json"
 	"errors"
 	"fmt"
-	"os"
 	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
@@ -42,18 +42,17 @@ func TriggerAppJSONGetContent(appName string) error {
 		return nil
 	}
 
-	b, err := os.ReadFile(getProcessSpecificAppJSONPath(appName))
+	appJSON, err := ReadAppJSON(getProcessSpecificAppJSONPath(appName))
 	if err != nil {
-		return fmt.Errorf("Cannot read app.json file: %v", err)
+		return err
 	}
 
-	content := strings.TrimSpace(string(b))
-	if content == "" {
-		fmt.Print("{}")
-		return nil
+	content, err := json.Marshal(appJSON)
+	if err != nil {
+		return err
 	}
 
-	fmt.Print(content)
+	fmt.Print(string(content))
 	return nil
 }
 

From 56566d1c056c250399285a0c03cdcdb73ccb8626 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 00:42:49 -0500
Subject: [PATCH 190/427] chore: make the postdeploy task name more clear

---
 plugins/app-json/functions.go | 6 +-----
 tests/unit/app-json-4.bats    | 2 +-
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/plugins/app-json/functions.go b/plugins/app-json/functions.go
index b596044c7..45610ff25 100644
--- a/plugins/app-json/functions.go
+++ b/plugins/app-json/functions.go
@@ -133,11 +133,7 @@ func cleanupDeploymentContainer(containerID string, phase string) error {
 }
 
 func executeScript(appName string, image string, imageTag string, phase string) error {
-	phaseName := phase
-	if phase == "heroku.postdeploy" {
-		phaseName = "first deploy postdeploy"
-	}
-	common.LogInfo1(fmt.Sprintf("Checking for %s task", phaseName))
+	common.LogInfo1(fmt.Sprintf("Checking for %s task", phase))
 	command := ""
 	phaseSource := ""
 	if phase == "release" {
diff --git a/tests/unit/app-json-4.bats b/tests/unit/app-json-4.bats
index 283d88034..315d1c777 100644
--- a/tests/unit/app-json-4.bats
+++ b/tests/unit/app-json-4.bats
@@ -50,7 +50,7 @@ teardown() {
   run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_failing_postdeploy
   echo "output: $output"
   echo "status: $status"
-  assert_output_contains "Execution of first deploy postdeploy task failed"
+  assert_output_contains "Execution of heroku.postdeploy task failed"
   assert_failure
 }
 

From 6b67d5c59b2288e091fd02c7038fef4100c4232d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 00:44:26 -0500
Subject: [PATCH 191/427] tests: do not modify the existing app.json via jq

The jq binary doesn't support jsonc, so we can't modify it for testing purposes. Instead, just create an app.json with the correct heroku.postdeploy task.
---
 tests/apps/python/app-heroku-postdeploy.json | 24 ++++++++++++++++++++
 tests/unit/app-json.bats                     |  7 +++++-
 tests/unit/test_helper.bash                  |  9 --------
 3 files changed, 30 insertions(+), 10 deletions(-)
 create mode 100644 tests/apps/python/app-heroku-postdeploy.json

diff --git a/tests/apps/python/app-heroku-postdeploy.json b/tests/apps/python/app-heroku-postdeploy.json
new file mode 100644
index 000000000..0daee49b0
--- /dev/null
+++ b/tests/apps/python/app-heroku-postdeploy.json
@@ -0,0 +1,24 @@
+{
+  "healthchecks": {
+    "web": [
+      {
+        "attempts": 2,
+        "content": "python/http.server",
+        "name": "check-1",
+        "path": "/",
+        "timeout": 5,
+        "type": "startup",
+        "wait": 2
+      }
+    ]
+  },
+  "scripts": {
+    "dokku": {
+      // this is a comment for the postdeploy script
+      "postdeploy": "touch /app/postdeploy.test",
+      // this is a comment for the predeploy script
+      "predeploy": "touch /app/predeploy.test"
+    },
+    "postdeploy": "touch /app/heroku-postdeploy.test"
+  }
+}
\ No newline at end of file
diff --git a/tests/unit/app-json.bats b/tests/unit/app-json.bats
index ba8325f6a..4c899d979 100644
--- a/tests/unit/app-json.bats
+++ b/tests/unit/app-json.bats
@@ -47,7 +47,12 @@ teardown() {
 }
 
 @test "(app-json) app.json scripts postdeploy" {
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_postdeploy_command
+  run /bin/bash -c "dokku app-json:set $TEST_APP appjson-path app-heroku-postdeploy.json"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 06546ce70..37e71d38a 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -561,15 +561,6 @@ add_release_command() {
   echo "release: touch /app/release.test" >>"$APP_REPO_DIR/Procfile"
 }
 
-add_postdeploy_command() {
-  local APP="$1"
-  local APP_REPO_DIR="$2"
-  [[ -z "$APP" ]] && local APP="$TEST_APP"
-  touch "$APP_REPO_DIR/app.json"
-  contents=$(jq '.scripts.postdeploy = "touch /app/heroku-postdeploy.test"' "$APP_REPO_DIR/app.json")
-  echo "${contents}" >"$APP_REPO_DIR/app.json"
-}
-
 move_dockerfile_into_place() {
   local APP="$1"
   local APP_REPO_DIR="$2"

From 318c21996afdae9e7aef9df59caf3aa75809f1e0 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 00:59:49 -0500
Subject: [PATCH 192/427] fix: use correct variable name

---
 plugins/app-json/functions.go | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugins/app-json/functions.go b/plugins/app-json/functions.go
index 45610ff25..55111a5de 100644
--- a/plugins/app-json/functions.go
+++ b/plugins/app-json/functions.go
@@ -148,14 +148,14 @@ func executeScript(appName string, image string, imageTag string, phase string)
 	}
 
 	if command == "" {
-		common.LogVerbose(fmt.Sprintf("No %s task found, skipping", phaseName))
+		common.LogVerbose(fmt.Sprintf("No %s task found, skipping", phase))
 		return nil
 	}
 
 	if phase == "predeploy" {
-		common.LogVerbose(fmt.Sprintf("Executing %s task from %s: %s", phaseName, phaseSource, command))
+		common.LogVerbose(fmt.Sprintf("Executing %s task from %s: %s", phase, phaseSource, command))
 	} else {
-		common.LogVerbose(fmt.Sprintf("Executing %s task from %s in ephemeral container: %s", phaseName, phaseSource, command))
+		common.LogVerbose(fmt.Sprintf("Executing %s task from %s in ephemeral container: %s", phase, phaseSource, command))
 	}
 
 	isHerokuishImage := common.IsImageHerokuishBased(image, appName)
@@ -267,15 +267,15 @@ func executeScript(appName string, image string, imageTag string, phase string)
 	defer cleanupDeploymentContainer(containerID, phase)
 
 	if !waitForExecution(containerID) {
-		common.LogInfo2Quiet(fmt.Sprintf("Start of %s %s task (%s) output", appName, phaseName, containerID[0:9]))
+		common.LogInfo2Quiet(fmt.Sprintf("Start of %s %s task (%s) output", appName, phase, containerID[0:9]))
 		common.LogVerboseQuietContainerLogs(containerID)
-		common.LogInfo2Quiet(fmt.Sprintf("End of %s %s task (%s) output", appName, phaseName, containerID[0:9]))
-		return fmt.Errorf("Execution of %s task failed: %s", phaseName, command)
+		common.LogInfo2Quiet(fmt.Sprintf("End of %s %s task (%s) output", appName, phase, containerID[0:9]))
+		return fmt.Errorf("Execution of %s task failed: %s", phase, command)
 	}
 
-	common.LogInfo2Quiet(fmt.Sprintf("Start of %s %s task (%s) output", appName, phaseName, containerID[0:9]))
+	common.LogInfo2Quiet(fmt.Sprintf("Start of %s %s task (%s) output", appName, phase, containerID[0:9]))
 	common.LogVerboseQuietContainerLogs(containerID)
-	common.LogInfo2Quiet(fmt.Sprintf("End of %s %s task (%s) output", appName, phaseName, containerID[0:9]))
+	common.LogInfo2Quiet(fmt.Sprintf("End of %s %s task (%s) output", appName, phase, containerID[0:9]))
 
 	if phase != "predeploy" {
 		return nil

From 54c1ccd9bbc783012be757a3a3a5a191d3044363 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 01:00:40 -0500
Subject: [PATCH 193/427] refactor: use tailscale/hujson to support trailing
 commas after the last member in arrays and lists

---
 plugins/app-json/appjson.go           |  9 +++++----
 plugins/app-json/go.mod               |  7 ++-----
 plugins/app-json/go.sum               | 14 ++------------
 plugins/cron/go.mod                   |  6 +-----
 plugins/cron/go.sum                   | 14 ++------------
 plugins/scheduler-docker-local/go.mod |  6 +-----
 plugins/scheduler-docker-local/go.sum | 14 ++------------
 plugins/scheduler-k3s/go.mod          |  3 +--
 plugins/scheduler-k3s/go.sum          |  6 ++----
 9 files changed, 18 insertions(+), 61 deletions(-)

diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index a85111889..c071dc908 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -8,7 +8,7 @@ import (
 	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
-	"github.com/marcozac/go-jsonc"
+	"github.com/tailscale/hujson"
 	"k8s.io/utils/ptr"
 )
 
@@ -263,13 +263,14 @@ func ReadAppJSON(path string) (AppJSON, error) {
 		return AppJSON{}, nil
 	}
 
-	data, err := jsonc.Sanitize(b)
+	ast, err := hujson.Parse(b)
 	if err != nil {
-		return AppJSON{}, fmt.Errorf("Cannot sanitize app.json: %v", err)
+		return AppJSON{}, fmt.Errorf("Cannot parse app.json as jsonc: %v", err)
 	}
+	ast.Standardize()
 
 	var appJSON AppJSON
-	if err = json.Unmarshal(data, &appJSON); err != nil {
+	if err = json.Unmarshal(ast.Pack(), &appJSON); err != nil {
 		return AppJSON{}, fmt.Errorf("Cannot parse app.json: %v", err)
 	}
 
diff --git a/plugins/app-json/go.mod b/plugins/app-json/go.mod
index 5fa492f18..dea24b213 100644
--- a/plugins/app-json/go.mod
+++ b/plugins/app-json/go.mod
@@ -5,29 +5,26 @@ go 1.25.1
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
-	github.com/marcozac/go-jsonc v0.1.1
 	github.com/spf13/pflag v1.0.10
+	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e
 )
 
 require (
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
 	github.com/fatih/color v1.18.0 // indirect
-	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/hashicorp/errwrap v1.0.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kr/fs v0.1.0 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/melbahja/goph v1.4.0 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/otiai10/copy v1.14.1 // indirect
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
+	github.com/stretchr/testify v1.8.4 // indirect
 	golang.org/x/crypto v0.43.0 // indirect
 	golang.org/x/sync v0.17.0 // indirect
 	golang.org/x/sys v0.37.0 // indirect
diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index 2dd1643df..d78d4f859 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -5,23 +5,16 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
-github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
-github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
-github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
-github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
-github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
-github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -29,10 +22,6 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
-github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
 github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
@@ -50,10 +39,11 @@ github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFo
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYjaeN8l2mc4kSz2iMiCDQxPEyltUV/I=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
diff --git a/plugins/cron/go.mod b/plugins/cron/go.mod
index 94de2ee13..ec154b9e2 100644
--- a/plugins/cron/go.mod
+++ b/plugins/cron/go.mod
@@ -15,22 +15,18 @@ require (
 require (
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
 	github.com/fatih/color v1.18.0 // indirect
-	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/hashicorp/errwrap v1.0.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
 	github.com/kr/fs v0.1.0 // indirect
-	github.com/marcozac/go-jsonc v0.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/melbahja/goph v1.4.0 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/otiai10/copy v1.14.1 // indirect
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
+	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
 	golang.org/x/crypto v0.43.0 // indirect
 	golang.org/x/sync v0.17.0 // indirect
 	golang.org/x/sys v0.37.0 // indirect
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index 5dc995815..b6ad7c9eb 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -7,17 +7,12 @@ github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
-github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
-github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
-github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
-github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
@@ -26,8 +21,6 @@ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
-github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -35,10 +28,6 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
-github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
@@ -62,10 +51,11 @@ github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFo
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYjaeN8l2mc4kSz2iMiCDQxPEyltUV/I=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
diff --git a/plugins/scheduler-docker-local/go.mod b/plugins/scheduler-docker-local/go.mod
index d9ffce405..7a1ae9bc3 100644
--- a/plugins/scheduler-docker-local/go.mod
+++ b/plugins/scheduler-docker-local/go.mod
@@ -13,24 +13,20 @@ require (
 	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
 	github.com/dokku/dokku/plugins/app-json v0.0.0-00010101000000-000000000000 // indirect
 	github.com/fatih/color v1.18.0 // indirect
-	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/hashicorp/errwrap v1.0.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
 	github.com/kr/fs v0.1.0 // indirect
-	github.com/marcozac/go-jsonc v0.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/melbahja/goph v1.4.0 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/otiai10/copy v1.14.1 // indirect
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
+	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
 	golang.org/x/crypto v0.43.0 // indirect
 	golang.org/x/sys v0.37.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index 1e0a7552c..bf0d48337 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -7,17 +7,12 @@ github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
-github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
-github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
-github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
-github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
@@ -26,8 +21,6 @@ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
-github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -35,10 +28,6 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
-github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
@@ -60,10 +49,11 @@ github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7
 github.com/ryanuber/columnize v2.1.2+incompatible h1:C89EOx/XBWwIXl8wm8OPJBd7kPF25UfsK2X7Ph/zCAk=
 github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYjaeN8l2mc4kSz2iMiCDQxPEyltUV/I=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 8b812d8a8..1fd43a278 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -75,7 +75,6 @@ require (
 	github.com/go-openapi/swag v0.23.1 // indirect
 	github.com/go-openapi/swag/jsonname v0.25.1 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
-	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
@@ -101,7 +100,6 @@ require (
 	github.com/lib/pq v1.10.9 // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
-	github.com/marcozac/go-jsonc v0.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-runewidth v0.0.16 // indirect
@@ -141,6 +139,7 @@ require (
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/spf13/cast v1.10.0 // indirect
 	github.com/spf13/cobra v1.10.1 // indirect
+	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
 	github.com/traefik/paerser v0.2.2 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index dfd077a48..c1a24645d 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -134,8 +134,6 @@ github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1v
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
-github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4=
-github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
 github.com/gofrs/flock v0.13.0 h1:95JolYOvGMqeH31+FC7D2+uULf6mG61mEZ/A8dRYMzw=
 github.com/gofrs/flock v0.13.0/go.mod h1:jxeyy9R1auM5S6JYDBhDt+E2TCo7DkratH4Pgi8P+Z0=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
@@ -223,8 +221,6 @@ github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de h1:9TO3cAIGXtEhn
 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de/go.mod h1:zAbeS9B/r2mtpb6U+EI2rYA5OAXxsYw6wTamcNW+zcE=
 github.com/mailru/easyjson v0.9.0 h1:PrnmzHw7262yW8sTBwxi1PdJA3Iw/EKBa8psRf7d9a4=
 github.com/mailru/easyjson v0.9.0/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUto+XFtTU=
-github.com/marcozac/go-jsonc v0.1.1 h1:dnZgAYinXsnI73ZemlbQYPOo1uZYD/LSYI7Aw9IbIeM=
-github.com/marcozac/go-jsonc v0.1.1/go.mod h1:BFDFoML/0Y4/XnOpOdomjrDBn1nIG96p7dlVXBDaybI=
 github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
 github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
@@ -345,6 +341,8 @@ github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYjaeN8l2mc4kSz2iMiCDQxPEyltUV/I=
+github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
 github.com/traefik/traefik/v2 v2.11.30 h1:Jkb5H8aI9lKQY/DDqwK3JP7iNUEnRfNLWXsr3azFf8w=

From 78f0c538713483f2e87582490e6bc066bc6468c6 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 22:46:00 -0500
Subject: [PATCH 194/427] feat: add ability to specify an app path via
 environment variable

This can be used for testing as well as in real usage.
---
 contrib/dokku_client.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/contrib/dokku_client.sh b/contrib/dokku_client.sh
index d2c7c4f04..c77ec1130 100755
--- a/contrib/dokku_client.sh
+++ b/contrib/dokku_client.sh
@@ -3,6 +3,7 @@ set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 export DOKKU_PORT=${DOKKU_PORT:=22}
 export DOKKU_HOST=${DOKKU_HOST:=}
+export DOKKU_APP_PATH=${DOKKU_APP_PATH:=}
 
 fn-random-number() {
   [[ -n "$1" ]] && RANGE="$1"
@@ -67,6 +68,7 @@ fn-get-remote() {
 
 main() {
   declare CMD="$1" APP_ARG="$2"
+
   local APP="" DOKKU_GIT_REMOTE="$(fn-get-remote)" DOKKU_REMOTE_HOST=""
   local cmd_set=false next_index=1 skip=false args=("$@")
 
@@ -84,6 +86,10 @@ main() {
       APP=${args[$next_index]}
       skip=true
       shift 2
+    elif [[ "$arg" == "--app-path" ]]; then
+      DOKKU_APP_PATH=${args[$next_index]}
+      skip=true
+      shift 2
     elif [[ "$arg" == "--remote" ]]; then
       DOKKU_GIT_REMOTE=${args[$next_index]}
       skip=true
@@ -103,6 +109,11 @@ main() {
     next_index=$((next_index + 1))
   done
 
+  if [[ -n "$DOKKU_APP_PATH" ]]; then
+    pushd "$DOKKU_APP_PATH" &>/dev/null || exit 1
+    trap 'popd &>/dev/null || true' RETURN INT TERM
+  fi
+
   DOKKU_REMOTE_HOST="$(fn-dokku-host "$DOKKU_GIT_REMOTE" "$DOKKU_HOST")"
   if [[ -z "$DOKKU_REMOTE_HOST" ]] && [[ "$CMD" != remote ]] && [[ "$CMD" != remote:* ]]; then
     fn-client-help-msg

From 7a93b11bdd679b485eb1dbb367de08856e279b5a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 22:46:29 -0500
Subject: [PATCH 195/427] feat: add tests for remote parsing

---
 contrib/dokku_client.sh | 10 ++++++
 tests/unit/client.bats  | 68 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 78 insertions(+)

diff --git a/contrib/dokku_client.sh b/contrib/dokku_client.sh
index c77ec1130..0446bc628 100755
--- a/contrib/dokku_client.sh
+++ b/contrib/dokku_client.sh
@@ -130,6 +130,16 @@ main() {
   fi
 
   case "$CMD" in
+    remote:show)
+      echo "dokku-app: $APP"
+      echo "dokku-git-remote: $DOKKU_GIT_REMOTE"
+      echo "dokku-host: $DOKKU_HOST"
+      echo "dokku-port: $DOKKU_PORT"
+      echo "dokku-remote-host: $DOKKU_REMOTE_HOST"
+      echo "dokku-ssh-user: dokku"
+      echo "dokku-constructed-remote: ssh://dokku@$DOKKU_REMOTE_HOST:$DOKKU_PORT/$APP"
+      exit 0
+      ;;
     apps:create)
       if [[ -z "$APP" ]] && [[ -z "$APP_ARG" ]]; then
         APP=$(fn-random-name)
diff --git a/tests/unit/client.bats b/tests/unit/client.bats
index 0c0610ea9..7cb3fe177 100644
--- a/tests/unit/client.bats
+++ b/tests/unit/client.bats
@@ -24,6 +24,74 @@ teardown() {
   assert_exit_status 20
 }
 
+@test "(client) remote:show" {
+  unset DOKKU_HOST
+  local DOKKU_APP_PATH=$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")
+  trap 'popd &>/dev/null || true; rm -rf "$DOKKU_APP_PATH"' INT TERM
+
+  setup_client_repo "$DOKKU_APP_PATH"
+  export DOKKU_APP_PATH="$DOKKU_APP_PATH"
+
+  # handle simple remote: dokku@example.com:app-name
+  run /bin/bash -c "git -C "$DOKKU_APP_PATH" remote add dokku 'dokku@example.com:$TEST_APP'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dokku-app: $TEST_APP"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_not_contains "dokku-host: example.com"
+  assert_output_not_contains "dokku-host: example.net"
+  assert_output_contains "dokku-host: "
+  assert_output_contains "dokku-port: 22"
+  assert_output_contains "dokku-remote-host: example.com"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@example.com:22/$TEST_APP"
+
+  # handle custom DOKKU_HOST (no app name detected without --app flag)
+  export DOKKU_HOST="example.com"
+  run /bin/bash -c "DOKKU_HOST="example.net" DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "dokku-app: $TEST_APP"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_contains "dokku-host: example.net"
+  assert_output_contains "dokku-port: 22"
+  assert_output_contains "dokku-remote-host: example.net"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@example.net:22/"
+  assert_output_not_contains "dokku-constructed-remote: ssh://dokku@example.net:22/$TEST_APP"
+
+  # handle custom DOKKU_HOST (app name detected with --app flag)
+  run /bin/bash -c "DOKKU_HOST="example.net" DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show --app $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dokku-app: $TEST_APP"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_contains "dokku-host: example.net"
+  assert_output_contains "dokku-port: 22"
+  assert_output_contains "dokku-remote-host: example.net"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@example.net:22/$TEST_APP"
+
+  # handle custom DOKKU_PORT
+  run /bin/bash -c "DOKKU_PORT=2222 DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dokku-app: $TEST_APP"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_contains "dokku-host: example.com"
+  assert_output_contains "dokku-port: 2222"
+  assert_output_contains "dokku-remote-host: example.com"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@example.com:2222/$TEST_APP"
 @test "(client) no args should print help" {
   # dokku container is not run with a TTY on GitHub Actions so we don't get normal output
   # https://github.com/actions/runner/issues/241

From a21ee6f21684fd888fcb908c472a45b2c6880b8b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 23:06:47 -0500
Subject: [PATCH 196/427] tests: make it clearer what happened when
 assert_output_contains fails

---
 tests/unit/test_helper.bash | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 06546ce70..ac759139a 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -148,7 +148,7 @@ assert_output_contains() {
     input="${input/$expected/}"
     found=$((found + 1))
   done
-  assert_equal "$count" "$found"
+  [[ "$count" -eq "$found" ]] || flunk "expected $count occurrences of '$expected', found $found"
 }
 
 assert_output_not_contains() {

From d94bc733c9b2afa8372bc936f5a088b33f63a4a4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 23:07:10 -0500
Subject: [PATCH 197/427] feat: allow overriding the TMP directory in
 setup_client_repo

---
 tests/unit/test_helper.bash | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index ac759139a..93be07b18 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -375,8 +375,7 @@ deploy_app() {
 }
 
 setup_client_repo() {
-  local TMP
-  TMP=$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")
+  declare TMP=${1:=$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")}
   rmdir "$TMP" && cp -r "${BATS_TEST_DIRNAME}/../../tests/apps/nodejs-express" "$TMP"
   cd "$TMP" || exit 1
   git init

From 67962ad52742af41c2db3a8a69a7f84e6b52cf17 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 23:07:40 -0500
Subject: [PATCH 198/427] tests: move helper to client.bats

---
 tests/unit/client.bats      | 13 +++++++++++++
 tests/unit/test_helper.bash | 13 -------------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/tests/unit/client.bats b/tests/unit/client.bats
index 7cb3fe177..38edf49c7 100644
--- a/tests/unit/client.bats
+++ b/tests/unit/client.bats
@@ -400,3 +400,16 @@ teardown() {
   assert_success
   assert_output_contains "triggered smoke-test-plugin:args with args: smoke-test-plugin:args, bash, -c, echo Hello"
 }
+
+setup_client_repo() {
+  declare TMP=${1:=$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")}
+  rmdir "$TMP" && cp -r "${BATS_TEST_DIRNAME}/../../tests/apps/nodejs-express" "$TMP"
+  cd "$TMP" || exit 1
+  git init
+  git config user.email "robot@example.com"
+  git config user.name "Test Robot"
+
+  [[ -f gitignore ]] && mv gitignore .gitignore
+  git add .
+  git commit -m 'initial commit'
+}
diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 93be07b18..3af2d7391 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -374,19 +374,6 @@ deploy_app() {
   git push target "master:${GIT_REMOTE_BRANCH}" || destroy_app $?
 }
 
-setup_client_repo() {
-  declare TMP=${1:=$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")}
-  rmdir "$TMP" && cp -r "${BATS_TEST_DIRNAME}/../../tests/apps/nodejs-express" "$TMP"
-  cd "$TMP" || exit 1
-  git init
-  git config user.email "robot@example.com"
-  git config user.name "Test Robot"
-
-  [[ -f gitignore ]] && mv gitignore .gitignore
-  git add .
-  git commit -m 'initial commit'
-}
-
 setup_test_tls() {
   local TLS_TYPE="$1"
   local TLS="/home/dokku/$TEST_APP/tls"

From 106b2c20f1d6626d2685504ca913340b1aa9b810 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 19 Nov 2025 23:11:26 -0500
Subject: [PATCH 199/427] feat: add support for git remotes with port specified
 inline

Closes #8093
---
 contrib/dokku_client.sh            | 37 ++++++++++++++++-
 docs/deployment/remote-commands.md |  8 +++-
 tests/unit/client.bats             | 67 +++++++++++++++++++++++++++++-
 3 files changed, 107 insertions(+), 5 deletions(-)

diff --git a/contrib/dokku_client.sh b/contrib/dokku_client.sh
index 0446bc628..2b43d004d 100755
--- a/contrib/dokku_client.sh
+++ b/contrib/dokku_client.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
-export DOKKU_PORT=${DOKKU_PORT:=22}
+export DOKKU_PORT=${DOKKU_PORT:=}
 export DOKKU_HOST=${DOKKU_HOST:=}
 export DOKKU_APP_PATH=${DOKKU_APP_PATH:=}
 
@@ -62,6 +62,35 @@ fn-dokku-host() {
   echo "$DOKKU_HOST"
 }
 
+fn-dokku-app() {
+  declare DOKKU_GIT_REMOTE="$1" DOKKU_REMOTE_HOST="$2"
+  remote_output="$(git remote -v 2>/dev/null | grep -Ei "^${DOKKU_GIT_REMOTE}\s" | head -n 1 | awk '{print $2}')"
+
+  # check if there is a scheme
+  if echo "$remote_output" | grep -qEi "ssh://"; then
+    echo "$remote_output" | grep -Ei "ssh://dokku@$DOKKU_REMOTE_HOST" | cut -f2 -d'@' | cut -f2 -d'/' 2>/dev/null
+  else
+    echo "$remote_output" | grep -Ei "dokku@$DOKKU_REMOTE_HOST" | cut -f2 -d'@' | cut -f2 -d':' 2>/dev/null
+  fi
+}
+
+fn-dokku-port() {
+  declare DOKKU_GIT_REMOTE="$1" DOKKU_REMOTE_HOST="$2"
+  remote_output="$(git remote -v 2>/dev/null | grep -Ei "^${DOKKU_GIT_REMOTE}\s" | head -n 1 | awk '{print $2}')"
+
+  if echo "$remote_output" | grep -qEi "ssh://"; then
+    local output="$(echo "$remote_output" | grep -Ei "ssh://dokku@$DOKKU_REMOTE_HOST" | cut -f2 -d'@' | cut -f1 -d'/' 2>/dev/null)"
+    # check if output has a : and if so, get the port
+    if echo "$output" | grep -qEi ":"; then
+      echo "$output" | cut -f2 -d':' 2>/dev/null
+    else
+      echo "22"
+    fi
+  else
+    echo "22"
+  fi
+}
+
 fn-get-remote() {
   git config dokku.remote 2>/dev/null || echo "dokku"
 }
@@ -122,13 +151,17 @@ main() {
   if [[ -z "$APP" ]]; then
     if [[ -d .git ]] || git rev-parse --git-dir &>/dev/null; then
       set +e
-      APP=$(git remote -v 2>/dev/null | grep -Ei "^${DOKKU_GIT_REMOTE}\s" | grep -Ei "dokku@$DOKKU_REMOTE_HOST" | head -n 1 | cut -f2 -d'@' | cut -f1 -d' ' | cut -f2 -d':' 2>/dev/null)
+      APP="$(fn-dokku-app "$DOKKU_GIT_REMOTE" "$DOKKU_REMOTE_HOST")"
       set -e
     else
       echo " !     This is not a git repository" 1>&2
     fi
   fi
 
+  if [[ -z "$DOKKU_PORT" ]]; then
+    DOKKU_PORT="$(fn-dokku-port "$DOKKU_GIT_REMOTE" "$DOKKU_REMOTE_HOST")"
+  fi
+
   case "$CMD" in
     remote:show)
       echo "dokku-app: $APP"
diff --git a/docs/deployment/remote-commands.md b/docs/deployment/remote-commands.md
index beebfde22..283ea2364 100644
--- a/docs/deployment/remote-commands.md
+++ b/docs/deployment/remote-commands.md
@@ -71,7 +71,7 @@ All commands have the application name automatically set via the `--app` flag on
 
 The client supports several environment variables:
 
-- `DOKKU_HOST` (default: `dokku` git remote): Used to interact with a specific remote server. Can be overridden via the `--remote` flag.
+- `DOKKU_HOST` (default: `dokku` git remote): Used to interact with a specific remote server. Can be overridden via the `--remote` flag. Must specify the `--app` flag when specified.
 - `DOKKU_PORT` (default: `22`): Used to specify a port to connect to the Dokku server on.
 
 It also supports several flags (all flags unspecified here are passed as is to the server):
@@ -99,6 +99,12 @@ To list all available remotes, run `dokku remote:list`. This is equivalent to ru
 
 To add a remote, run `dokku remote:add $REMOTE_NAME dokku@dokku.me:$APP_NAME`, replacing `$REMOTE_NAME` with your desired remote name, the `$APP_NAME` with your desired app name and the host `dokku.me` with your Dokku host. This is equivalent to running `git remote add $REMOTE_NAME dokku@dokku.me:$APP_NAME`.
 
+The following remote formats are supported:
+
+- `dokku@HOSTNAME.TLD:APP_NAME`
+- `ssh://dokku@HOSTNAME.TLD/APP_NAME`
+- `ssh://dokku@HOSTNAME.TLD:HOST_PORT/APP_NAME`
+
 To remove a remote, run `dokku remote:remove $REMOTE_NAME`. This is equivalent to running `git remote remove $REMOTE_NAME`.
 
 By default, the remote in use is `dokku`. To change the remote the client uses by default, run `dokku remote:set $REMOTE_NAME`, where `$REMOTE_NAME` is the name of your desired remote. This will not check the value specified, so that remote *must* be available or errors will occur when running normal client commands. Note that specifying `--remote` when running dokku commands will override this configuration value.
diff --git a/tests/unit/client.bats b/tests/unit/client.bats
index 38edf49c7..d9d875ec2 100644
--- a/tests/unit/client.bats
+++ b/tests/unit/client.bats
@@ -53,7 +53,6 @@ teardown() {
   assert_output_contains "dokku-constructed-remote: ssh://dokku@example.com:22/$TEST_APP"
 
   # handle custom DOKKU_HOST (no app name detected without --app flag)
-  export DOKKU_HOST="example.com"
   run /bin/bash -c "DOKKU_HOST="example.net" DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
   echo "output: $output"
   echo "status: $status"
@@ -87,11 +86,75 @@ teardown() {
   assert_success
   assert_output_contains "dokku-app: $TEST_APP"
   assert_output_contains "dokku-git-remote: dokku"
-  assert_output_contains "dokku-host: example.com"
+  assert_output_not_contains "dokku-host: example.com"
+  assert_output_not_contains "dokku-host: example.net"
+  assert_output_contains "dokku-host: "
   assert_output_contains "dokku-port: 2222"
   assert_output_contains "dokku-remote-host: example.com"
   assert_output_contains "dokku-ssh-user: dokku"
   assert_output_contains "dokku-constructed-remote: ssh://dokku@example.com:2222/$TEST_APP"
+
+  # handle remote with scheme (no port): ssh://dokku@example.com/app-name
+  run /bin/bash -c "git -C "$DOKKU_APP_PATH" remote set-url dokku 'ssh://dokku@example.com:22/$TEST_APP'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dokku-app: $TEST_APP"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_not_contains "dokku-host: example.com"
+  assert_output_not_contains "dokku-host: example.net"
+  assert_output_contains "dokku-host: "
+  assert_output_contains "dokku-port: 22"
+  assert_output_contains "dokku-remote-host: example.com"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@example.com:22/$TEST_APP"
+
+  # handle remote with scheme (with port): ssh://dokku@example.com:2222/app-name
+  run /bin/bash -c "git -C "$DOKKU_APP_PATH" remote set-url dokku 'ssh://dokku@example.com:2222/$TEST_APP'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dokku-app: $TEST_APP"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_not_contains "dokku-host: example.com"
+  assert_output_not_contains "dokku-host: example.net"
+  assert_output_contains "dokku-host: "
+  assert_output_contains "dokku-port: 2222"
+  assert_output_contains "dokku-remote-host: example.com"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@example.com:2222/$TEST_APP"
+
+  # #8093: ssh://dokku@pipescan.shipit.dev:2222/pipescan
+  run /bin/bash -c "git -C "$DOKKU_APP_PATH" remote set-url dokku 'ssh://dokku@pipescan.shipit.dev:2222/pipescan'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "DOKKU_APP_PATH=$DOKKU_APP_PATH ${BATS_TEST_DIRNAME}/../../contrib/dokku_client.sh remote:show"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dokku-app: pipescan"
+  assert_output_contains "dokku-git-remote: dokku"
+  assert_output_not_contains "dokku-host: example.com"
+  assert_output_not_contains "dokku-host: example.net"
+  assert_output_contains "dokku-host: "
+  assert_output_contains "dokku-port: 2222"
+  assert_output_contains "dokku-remote-host: pipescan.shipit.dev"
+  assert_output_contains "dokku-ssh-user: dokku"
+  assert_output_contains "dokku-constructed-remote: ssh://dokku@pipescan.shipit.dev:2222/pipescan"
+}
+
 @test "(client) no args should print help" {
   # dokku container is not run with a TTY on GitHub Actions so we don't get normal output
   # https://github.com/actions/runner/issues/241

From 63fc11a4b9cb970f462affaf200ebc377605cf94 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 02:21:20 -0500
Subject: [PATCH 200/427] fix: properly use $1 as default value

---
 tests/unit/client.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/client.bats b/tests/unit/client.bats
index d9d875ec2..9d81b66a0 100644
--- a/tests/unit/client.bats
+++ b/tests/unit/client.bats
@@ -465,7 +465,7 @@ teardown() {
 }
 
 setup_client_repo() {
-  declare TMP=${1:=$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")}
+  declare TMP="${1:-$(mktemp -d "/tmp/${DOKKU_DOMAIN}.XXXXX")}"
   rmdir "$TMP" && cp -r "${BATS_TEST_DIRNAME}/../../tests/apps/nodejs-express" "$TMP"
   cd "$TMP" || exit 1
   git init

From afd2952cb1787aeed8765c9904df52b109445f8f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 02:41:57 -0500
Subject: [PATCH 201/427] feat: turn on buildpack trace mode when dokku trace
 is on

This removes the need for an extra step to enable more verbose debug logs from buildpacks.

Refs https://github.com/dokku/dokku/discussions/8070
---
 plugins/builder-herokuish/builder-build | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/plugins/builder-herokuish/builder-build b/plugins/builder-herokuish/builder-build
index de11de1bb..0ad5d5aac 100755
--- a/plugins/builder-herokuish/builder-build
+++ b/plugins/builder-herokuish/builder-build
@@ -61,7 +61,10 @@ trigger-builder-herokuish-builder-build() {
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
-  [[ "$DOKKU_TRACE" ]] && DOCKER_ARGS+=" --env=TRACE=true "
+  if [[ -n "$DOKKU_TRACE" ]]; then
+    DOCKER_ARGS+=" --env=TRACE=true "
+    DOCKER_ARGS+=" --env=BUILDPACK_XTRACE=1 "
+  fi
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
 
   declare -a ARG_ARRAY

From 0ef276d40b30cfb7447c4bff840384c0066d61b9 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 03:11:49 -0500
Subject: [PATCH 202/427] feat: add aliases for select builder and scheduler
 plugins

It can get repetitive to specify 'builder-' or 'scheduler-' prefixes for builder and scheduler commands. As these are mostly unique, Dokku now provides built-in aliases for the commands. Dokku still uses the long-form in all it's documentation, but these are a nice easter egg for determined users :)

Note that the null builder/scheduler plugins do not have aliases as they would shadow each other.
---
 dokku | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/dokku b/dokku
index cd8a381a4..879e0e0cd 100755
--- a/dokku
+++ b/dokku
@@ -135,6 +135,28 @@ execute_dokku_cmd() {
   local script
   local argv=("$@")
 
+  local -A PLUGIN_ALIASES=(
+    [docker-local]="scheduler-docker-local"
+    [dockerfile]="builder-dockerfile"
+    [herokuish]="builder-herokuish"
+    [k3s]="scheduler-k3s"
+    [lambda]="builder-lambda"
+    [nixpacks]="builder-nixpacks"
+    [pack]="builder-pack"
+    [rails]="builder-railpack"
+  )
+
+  local plugin_alias_source="${PLUGIN_NAME%%:*}"
+  local plugin_alias_target="${PLUGIN_ALIASES[$plugin_alias_source]}"
+  if [[ -n "$plugin_alias_target" ]]; then
+    PLUGIN_NAME="${PLUGIN_NAME/$plugin_alias_source/$plugin_alias_target}"
+    PLUGIN_CMD="${PLUGIN_CMD/$plugin_alias_source/$plugin_alias_target}"
+    # also replace the first argument in $@ with the new PLUGIN_NAME
+    shift 1
+    set -- "$PLUGIN_NAME" "$@"
+    argv=("$PLUGIN_NAME" "${argv[@]:1}")
+  fi
+
   case "$PLUGIN_NAME" in
     events | events:*)
       local PLUGIN_NAME=${PLUGIN_NAME/events/20_events}

From f6b97100ea14f9f48823db54ce886c7ec12eeaa5 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 04:29:41 -0500
Subject: [PATCH 203/427] fix: correct lint issue

---
 dokku | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/dokku b/dokku
index 879e0e0cd..60caaa6e2 100755
--- a/dokku
+++ b/dokku
@@ -135,16 +135,15 @@ execute_dokku_cmd() {
   local script
   local argv=("$@")
 
-  local -A PLUGIN_ALIASES=(
-    [docker-local]="scheduler-docker-local"
-    [dockerfile]="builder-dockerfile"
-    [herokuish]="builder-herokuish"
-    [k3s]="scheduler-k3s"
-    [lambda]="builder-lambda"
-    [nixpacks]="builder-nixpacks"
-    [pack]="builder-pack"
-    [rails]="builder-railpack"
-  )
+  local -A PLUGIN_ALIASES
+  PLUGIN_ALIASES["docker-local"]="scheduler-docker-local"
+  PLUGIN_ALIASES["dockerfile"]="builder-dockerfile"
+  PLUGIN_ALIASES["herokuish"]="builder-herokuish"
+  PLUGIN_ALIASES["k3s"]="scheduler-k3s"
+  PLUGIN_ALIASES["lambda"]="builder-lambda"
+  PLUGIN_ALIASES["nixpacks"]="builder-nixpacks"
+  PLUGIN_ALIASES["pack"]="builder-pack"
+  PLUGIN_ALIASES["rails"]="builder-railpack"
 
   local plugin_alias_source="${PLUGIN_NAME%%:*}"
   local plugin_alias_target="${PLUGIN_ALIASES[$plugin_alias_source]}"

From ca5c887b8a4eac8d9f2bee51f40d50b18d31a89c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 02:18:55 -0500
Subject: [PATCH 204/427] feat: add the ability to create k3s node profiles

Node profiles can be used to specify repetitive options for clusters, making it easier to add specific types of instances quickly.

This PR additionally fixes kubelet-args specification - the same key can be specified multiple times, such as when specifying custom sysctl rules.
---
 docs/deployment/schedulers/k3s.md             |  63 ++++++-
 plugins/scheduler-k3s/scheduler_k3s.go        |  16 ++
 .../scheduler-k3s/src/commands/commands.go    |   5 +-
 .../src/subcommands/subcommands.go            |  24 ++-
 plugins/scheduler-k3s/subcommands.go          | 174 ++++++++++++++++--
 5 files changed, 261 insertions(+), 21 deletions(-)

diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index 3f05ef279..e0e96033d 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -12,7 +12,10 @@ scheduler-k3s:cluster-list                          # Lists all nodes in a Dokku
 scheduler-k3s:cluster-remove [node-id]              # Removes client node to a Dokku-managed cluster
 scheduler-k3s:ensure-charts                         # Ensures the k3s charts are installed
 scheduler-k3s:initialize                            # Initializes a cluster
-scheduler-k3s:labels:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear a label for a given app/process-type/resource-type combination
+scheduler-k3s:labels:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE> # Set or clear a label for a given app/process-type/resource-type combination
+scheduler-k3s:profiles:add <profile> [--role ROLE] [--insecure-allow-unknown-hosts] [--taint-scheduling] [--kubelet-args KUBELET_ARGS] Adds a node profile to the k3s cluster
+scheduler-k3s:profiles:list [--format json|stdout]  # Lists all node profiles in the k3s cluster
+scheduler-k3s:profiles:remove <profile>             # Removes a node profile from the k3s cluster
 scheduler-k3s:report [<app>] [<flag>]               # Displays a scheduler-k3s report for one or more apps
 scheduler-k3s:set [<app>|--global] <key> (<value>)  # Set or clear a scheduler-k3s property for an app or the scheduler
 scheduler-k3s:show-kubeconfig                       # Displays the kubeconfig for remote usage
@@ -83,6 +86,22 @@ Nodes that run app workloads can be added via the `scheduler-k3s:cluster-add` co
 dokku scheduler-k3s:cluster-add  ssh://root@worker-1.example.com
 ```
 
+Per-node kubelet flags can be supplied by passing `--kubelet-args` with a comma-separated `key=value` list. This is useful for tuning scheduler capacity or enforcing cluster-wide defaults at the node level.
+
+```shell
+dokku scheduler-k3s:cluster-add \
+  --kubelet-args allowed-unsafe-sysctls=net.ipv6.conf.all.disable_ipv6 \
+  ssh://root@worker-1.example.com
+```
+
+Multiple kubelet arguments can be specified in the same call by separating them with commas. The following example enables IPv4 forwarding while also increasing the pod density on the worker.
+
+```shell
+dokku scheduler-k3s:cluster-add \
+  --kubelet-args allowed-unsafe-sysctls=net.ipv6.conf.all.disable_ipv6,max-pods=150 \
+  ssh://root@worker-2.example.com
+```
+
 If the server isn't in the `known_hosts` file, the connection will fail. This can be bypassed by setting the `--insecure-allow-unknown-hosts` flag:
 
 ```shell
@@ -134,6 +153,48 @@ When attaching an worker or server node, the K3s plugin will look at the IP asso
 dokku scheduler-k3s:set --global network-interface eth1
 ```
 
+### Node Profiles
+
+Node profiles capture repeatable `scheduler-k3s:cluster-add` options so you can join multiple nodes with identical settings. A profile name can be specified for the `scheduler-k3s:cluster-add` command via the  `--profile <name>` flag. Any flags passed directly to `scheduler-k3s:cluster-add` override the stored values for that run.
+
+#### Listing profiles
+
+Display stored profiles to understand which roles and behaviors will be used.
+
+```shell
+dokku scheduler-k3s:profiles:list
+```
+
+```
+name            role
+awesome-profile worker
+```
+
+This command also takes an optional `--format` flag to specify a format for the output. Options include `json` and `stdout`
+
+#### Adding profiles
+
+Create or update a profile that defines how new nodes should be prepared before joining the cluster.
+
+```shell
+dokku scheduler-k3s:profiles:add edge-workers \
+  --role worker \
+  --insecure-allow-unknown-hosts \
+  --kubelet-args protect-kernel-defaults=true,eviction-hard=memory.available<200Mi
+```
+
+Profile names must be alphanumeric, may include internal dashes, cannot start/end with a dash, and must be ≤32 characters. Other than the `--server-ip` flag, all flags used for `scheduler-k3s:cluster-add` are valid for the `scheduler-k3s:profiles:add` command.
+
+#### scheduler-k3s:profiles:remove
+
+Delete a profile once it’s no longer required.
+
+```shell
+dokku scheduler-k3s:profiles:remove edge-workers
+```
+
+Removal only deletes the stored definition; nodes that already joined the cluster keep their existing configuration.
+
 ### Changing deployment settings
 
 The k3s plugin provides a number of settings that can be used to managed deployments on a per-app basis. The following table outlines ones not covered elsewhere:
diff --git a/plugins/scheduler-k3s/scheduler_k3s.go b/plugins/scheduler-k3s/scheduler_k3s.go
index fbf29a7bc..190571c5f 100644
--- a/plugins/scheduler-k3s/scheduler_k3s.go
+++ b/plugins/scheduler-k3s/scheduler_k3s.go
@@ -164,10 +164,26 @@ var HelmRepositories = []HelmRepository{
 	},
 }
 
+// NodeProfile is a profile for a node in the k3s cluster
+type NodeProfile struct {
+	// Name is the name of the node profile
+	Name string `json:"name"`
+	// Role is the role of the node
+	Role string `json:"role"`
+	// AllowUknownHosts is whether to allow unknown hosts
+	AllowUknownHosts bool `json:"allow_unknown_hosts,omitempty"`
+	// TaintScheduling is whether to taint the node for scheduling
+	TaintScheduling bool `json:"taint_scheduling,omitempty"`
+	// KubeletArgs is a list of kubelet arguments
+	KubeletArgs []string `json:"kubelet_args,omitempty"`
+}
+
+// ServerLabels are the labels for a server node
 var ServerLabels = map[string]string{
 	"svccontroller.k3s.cattle.io/enablelb": "true",
 }
 
+// WorkerLabels are the labels for a worker node
 var WorkerLabels = map[string]string{
 	"node-role.kubernetes.io/worker": "worker",
 }
diff --git a/plugins/scheduler-k3s/src/commands/commands.go b/plugins/scheduler-k3s/src/commands/commands.go
index 4f78f018d..6ae1ac040 100644
--- a/plugins/scheduler-k3s/src/commands/commands.go
+++ b/plugins/scheduler-k3s/src/commands/commands.go
@@ -19,12 +19,15 @@ Additional commands:`
 	helpContent = `
     scheduler-k3s:autoscaling-auth:set <app|--global> <trigger> [<--metadata key=value>...], Set or clear a scheduler-k3s autoscaling keda trigger authentication resource for an app
     scheduler-k3s:annotations:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear an annotation for a given app/process-type/resource-type combination
-    scheduler-k3s:cluster-add [--insecure-allow-unknown-hosts] [--server-ip SERVER_IP] [--taint-scheduling] <ssh://user@host:port>, Adds a server node to a Dokku-managed cluster
+    scheduler-k3s:cluster-add [--profile PROFILE] [--role ROLE] [--insecure-allow-unknown-hosts] [--server-ip SERVER_IP] [--taint-scheduling] [--kubelet-args KUBELET_ARGS] <ssh://user@host:port>, Adds a server node to a Dokku-managed cluster
     scheduler-k3s:cluster-list [--format json|stdout], Lists all nodes in a Dokku-managed cluster
     scheduler-k3s:cluster-remove [node-id], Removes client node to a Dokku-managed cluster
     scheduler-k3s:ensure-charts, Ensures the k3s charts are installed
     scheduler-k3s:initialize [--server-ip SERVER_IP] [--taint-scheduling], Initializes a cluster
     scheduler-k3s:labels:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear a label for a given app/process-type/resource-type combination
+    scheduler-k3s:profiles:add <profile> [--role ROLE] [--insecure-allow-unknown-hosts] [--taint-scheduling] [--kubelet-args KUBELET_ARGS], Adds a node profile to the k3s cluster
+    scheduler-k3s:profiles:list [--format json|stdout], Lists all node profiles in the k3s cluster
+    scheduler-k3s:profiles:remove <profile>, Removes a node profile from the k3s cluster
     scheduler-k3s:report [<app>] [<flag>], Displays a scheduler-k3s report for one or more apps
     scheduler-k3s:set <app> <property> (<value>), Set or clear a scheduler-k3s property for an app
     scheduler-k3s:show-kubeconfig, Displays the kubeconfig for remote usage
diff --git a/plugins/scheduler-k3s/src/subcommands/subcommands.go b/plugins/scheduler-k3s/src/subcommands/subcommands.go
index 1c55fac2c..d91bc9583 100644
--- a/plugins/scheduler-k3s/src/subcommands/subcommands.go
+++ b/plugins/scheduler-k3s/src/subcommands/subcommands.go
@@ -59,11 +59,12 @@ func main() {
 		allowUknownHosts := args.Bool("insecure-allow-unknown-hosts", false, "insecure-allow-unknown-hosts: allow unknown hosts")
 		taintScheduling := args.Bool("taint-scheduling", false, "taint-scheduling: add a taint against scheduling app workloads")
 		serverIP := args.String("server-ip", "", "server-ip: IP address of the dokku server node")
-		kubeletArgs := args.StringToString("kubelet-args", map[string]string{}, "kubelet-args: a key=value map of kubelet arguments")
+		kubeletArgs := args.StringSlice("kubelet-args", []string{}, "kubelet-args: repeatable key=value kubelet arguments (e.g., --kubelet-args key=value)")
 		role := args.String("role", "worker", "role: [ server | worker ]")
+		profileName := args.String("profile", "", "profile: name of the node profile to use")
 		args.Parse(os.Args[2:])
 		remoteHost := args.Arg(0)
-		err = scheduler_k3s.CommandClusterAdd(*role, remoteHost, *serverIP, *allowUknownHosts, *taintScheduling, *kubeletArgs)
+		err = scheduler_k3s.CommandClusterAdd(*profileName, *role, remoteHost, *serverIP, *allowUknownHosts, *taintScheduling, *kubeletArgs)
 	case "cluster-list":
 		args := flag.NewFlagSet("scheduler-k3s:cluster-list", flag.ExitOnError)
 		format := args.String("format", "stdout", "format: [ stdout | json ]")
@@ -103,6 +104,25 @@ func main() {
 		}
 
 		err = scheduler_k3s.CommandLabelsSet(appName, *processType, *resourceType, property, value)
+	case "profiles:add":
+		args := flag.NewFlagSet("scheduler-k3s:profiles:add", flag.ExitOnError)
+		role := args.String("role", "worker", "role: [ server | worker ]")
+		allowUknownHosts := args.Bool("insecure-allow-unknown-hosts", false, "insecure-allow-unknown-hosts: allow unknown hosts")
+		taintScheduling := args.Bool("taint-scheduling", false, "taint-scheduling: add a taint against scheduling app workloads")
+		kubeletArgs := args.StringSlice("kubelet-args", []string{}, "kubelet-args: repeatable key=value kubelet arguments (e.g., --kubelet-args key=value)")
+		args.Parse(os.Args[2:])
+		profileName := args.Arg(0)
+		err = scheduler_k3s.CommandProfilesAdd(profileName, *role, *allowUknownHosts, *taintScheduling, *kubeletArgs)
+	case "profiles:list":
+		args := flag.NewFlagSet("scheduler-k3s:profiles:list", flag.ExitOnError)
+		format := args.String("format", "stdout", "format: [ stdout | json ]")
+		args.Parse(os.Args[2:])
+		err = scheduler_k3s.CommandProfilesList(*format)
+	case "profiles:remove":
+		args := flag.NewFlagSet("scheduler-k3s:profiles:remove", flag.ExitOnError)
+		args.Parse(os.Args[2:])
+		profileName := args.Arg(0)
+		err = scheduler_k3s.CommandProfilesRemove(profileName)
 	case "report":
 		args := flag.NewFlagSet("scheduler-k3s:report", flag.ExitOnError)
 		format := args.String("format", "stdout", "format: [ stdout | json ]")
diff --git a/plugins/scheduler-k3s/subcommands.go b/plugins/scheduler-k3s/subcommands.go
index b1361d5a5..f67d82591 100644
--- a/plugins/scheduler-k3s/subcommands.go
+++ b/plugins/scheduler-k3s/subcommands.go
@@ -9,6 +9,7 @@ import (
 	"net/url"
 	"os"
 	"os/signal"
+	"regexp"
 	"slices"
 	"sort"
 	"strings"
@@ -400,7 +401,7 @@ func CommandInitialize(ingressClass string, serverIP string, taintScheduling boo
 }
 
 // CommandClusterAdd adds a server to the k3s cluster
-func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUknownHosts bool, taintScheduling bool, kubeletArgs map[string]string) error {
+func CommandClusterAdd(profileName string, role string, remoteHost string, serverIP string, allowUknownHosts bool, taintScheduling bool, kubeletArgs []string) error {
 	if err := isK3sInstalled(); err != nil {
 		return fmt.Errorf("k3s not installed, cannot add node to cluster: %w", err)
 	}
@@ -414,8 +415,38 @@ func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUkn
 		return fmt.Errorf("kubernetes api not available, cannot add node to cluster: %w", err)
 	}
 
-	if role != "server" && role != "worker" {
-		return fmt.Errorf("Invalid server-type: %s", role)
+	incomingProfile := NodeProfile{}
+
+	if profileName != "" {
+		properties := common.PropertyGetDefault("scheduler-k3s", "--global", fmt.Sprintf("node-profile-%s", profileName), "")
+		if properties == "" {
+			return fmt.Errorf("Node profile %s not found", profileName)
+		}
+
+		err = json.Unmarshal([]byte(properties), &incomingProfile)
+		if err != nil {
+			return fmt.Errorf("Unable to unmarshal node profile: %w", err)
+		}
+	}
+
+	if role != "" {
+		incomingProfile.Role = role
+	}
+
+	if allowUknownHosts {
+		incomingProfile.AllowUknownHosts = allowUknownHosts
+	}
+
+	if taintScheduling {
+		incomingProfile.TaintScheduling = taintScheduling
+	}
+
+	if len(kubeletArgs) > 0 {
+		incomingProfile.KubeletArgs = kubeletArgs
+	}
+
+	if incomingProfile.Role != "server" && incomingProfile.Role != "worker" {
+		return fmt.Errorf("Invalid role: %s", incomingProfile.Role)
 	}
 
 	token := getGlobalGlobalToken()
@@ -423,7 +454,7 @@ func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUkn
 		return fmt.Errorf("Missing k3s token")
 	}
 
-	if taintScheduling && role == "worker" {
+	if incomingProfile.TaintScheduling && incomingProfile.Role == "worker" {
 		return fmt.Errorf("Taint scheduling can only be used on the server role")
 	}
 
@@ -472,14 +503,14 @@ func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUkn
 	}
 	common.LogDebug(fmt.Sprintf("k3s version: %s", k3sVersion))
 
-	common.LogInfo1(fmt.Sprintf("Joining %s to k3s cluster as %s", remoteHost, role))
+	common.LogInfo1(fmt.Sprintf("Joining %s to k3s cluster as %s", remoteHost, incomingProfile.Role))
 	common.LogInfo2Quiet("Updating apt")
 	aptUpdateCmd, err := common.CallSshCommand(common.SshCommandInput{
 		Command: "apt-get",
 		Args: []string{
 			"update",
 		},
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		RemoteHost:       remoteHost,
 		StreamStdio:      true,
 		Sudo:             true,
@@ -503,7 +534,7 @@ func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUkn
 			"nfs-common",
 			"wireguard",
 		},
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		RemoteHost:       remoteHost,
 		StreamStdio:      true,
 		Sudo:             true,
@@ -522,7 +553,7 @@ func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUkn
 			"-o /tmp/k3s-installer.sh",
 			"https://get.k3s.io",
 		},
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		RemoteHost:       remoteHost,
 		StreamStdio:      true,
 	})
@@ -540,7 +571,7 @@ func CommandClusterAdd(role string, remoteHost string, serverIP string, allowUkn
 			"0755",
 			"/tmp/k3s-installer.sh",
 		},
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		RemoteHost:       remoteHost,
 		StreamStdio:      true,
 	})
@@ -577,7 +608,7 @@ export INSTALL_K3S_VERSION=%s
 	tmpFile.Close()
 
 	sftpCopyCmd, err := common.CallSftpCopy(common.SftpCopyInput{
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		DestinationPath:  "/tmp/k3s-installer-executor.sh",
 		RemoteHost:       remoteHost,
 		SourcePath:       tmpFile.Name(),
@@ -595,7 +626,7 @@ export INSTALL_K3S_VERSION=%s
 			"0755",
 			"/tmp/k3s-installer-executor.sh",
 		},
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		RemoteHost:       remoteHost,
 		StreamStdio:      true,
 	})
@@ -634,7 +665,7 @@ export INSTALL_K3S_VERSION=%s
 		token,
 	}
 
-	if role == "server" {
+	if incomingProfile.Role == "server" {
 		args = append([]string{"server"}, args...)
 		// expose etcd metrics
 		args = append(args, "--etcd-expose-metrics")
@@ -661,19 +692,19 @@ export INSTALL_K3S_VERSION=%s
 		args = append(args, "--kube-proxy-arg", "metrics-bind-address=0.0.0.0")
 	}
 
-	if taintScheduling {
+	if incomingProfile.TaintScheduling {
 		args = append(args, "--node-taint", "CriticalAddonsOnly=true:NoSchedule")
 	}
 
-	for key, value := range kubeletArgs {
-		args = append(args, "--kubelet-arg", fmt.Sprintf("%s=%s", key, value))
+	for _, kubeletArg := range incomingProfile.KubeletArgs {
+		args = append(args, "--kubelet-arg", kubeletArg)
 	}
 
 	common.LogInfo2Quiet(fmt.Sprintf("Adding %s k3s cluster", nodeName))
 	joinCmd, err := common.CallSshCommand(common.SshCommandInput{
 		Command:          "/tmp/k3s-installer-executor.sh",
 		Args:             args,
-		AllowUknownHosts: allowUknownHosts,
+		AllowUknownHosts: incomingProfile.AllowUknownHosts,
 		RemoteHost:       remoteHost,
 		StreamStdio:      true,
 		Sudo:             true,
@@ -699,7 +730,7 @@ export INSTALL_K3S_VERSION=%s
 	}
 
 	labels := ServerLabels
-	if role == "worker" {
+	if incomingProfile.Role == "worker" {
 		labels = WorkerLabels
 	}
 
@@ -995,6 +1026,115 @@ func CommandLabelsSet(appName string, processType string, resourceType string, k
 	return nil
 }
 
+// CommandProfilesAdd adds a node profile to the k3s cluster
+func CommandProfilesAdd(profileName string, role string, allowUknownHosts bool, taintScheduling bool, kubeletArgs []string) error {
+	if role != "server" && role != "worker" {
+		return fmt.Errorf("Invalid role: %s", role)
+	}
+
+	if profileName == "" {
+		return fmt.Errorf("Missing profile name")
+	}
+
+	// profile names must only contain alphanumeric characters and dashes and cannot start with a dash
+	if !regexp.MustCompile(`^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?$`).MatchString(profileName) {
+		return fmt.Errorf("Invalid profile name, must only contain alphanumeric characters and dashes and cannot start with a dash: %s", profileName)
+	}
+
+	// ensure profile names are no longer than 32 characters
+	if len(profileName) > 32 {
+		return fmt.Errorf("Profile name is too long, must be less than 32 characters: %s", profileName)
+	}
+
+	profile := NodeProfile{
+		Name:             profileName,
+		Role:             role,
+		AllowUknownHosts: allowUknownHosts,
+		TaintScheduling:  taintScheduling,
+		KubeletArgs:      kubeletArgs,
+	}
+
+	data, err := json.Marshal(profile)
+	if err != nil {
+		return fmt.Errorf("Unable to marshal node profile to json: %w", err)
+	}
+
+	if err := common.PropertyWrite("scheduler-k3s", "--global", fmt.Sprintf("node-profile-%s.json", profileName), string(data)); err != nil {
+		return fmt.Errorf("Unable to write node profile: %w", err)
+	}
+
+	common.LogInfo1(fmt.Sprintf("Node profile %s added", profileName))
+
+	return nil
+}
+
+// CommandProfilesList lists the node profiles in the k3s cluster
+func CommandProfilesList(format string) error {
+	if format != "stdout" && format != "json" {
+		return fmt.Errorf("Invalid format: %s", format)
+	}
+
+	properties, err := common.PropertyGetAllByPrefix("scheduler-k3s", "--global", "node-profile-")
+	if err != nil {
+		return fmt.Errorf("Unable to get node profiles: %w", err)
+	}
+
+	output := []NodeProfile{}
+	for _, data := range properties {
+		var profile NodeProfile
+		err := json.Unmarshal([]byte(data), &profile)
+		if err != nil {
+			return fmt.Errorf("Unable to unmarshal node profile: %w", err)
+		}
+
+		output = append(output, profile)
+	}
+
+	if format == "stdout" {
+		lines := []string{"name|role"}
+		for _, profile := range output {
+			lines = append(lines, fmt.Sprintf("%s|%s", profile.Name, profile.Role))
+		}
+
+		columnized := columnize.SimpleFormat(lines)
+		fmt.Println(columnized)
+		return nil
+	}
+
+	b, err := json.Marshal(output)
+	if err != nil {
+		return fmt.Errorf("Unable to marshal json: %w", err)
+	}
+
+	fmt.Println(string(b))
+
+	return nil
+}
+
+// CommandProfilesRemove removes a node profile from the k3s cluster
+func CommandProfilesRemove(profileName string) error {
+	if profileName == "" {
+		return fmt.Errorf("Missing profile name")
+	}
+
+	// profile names must only contain alphanumeric characters and dashes and cannot start with a dash
+	if !regexp.MustCompile(`^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?$`).MatchString(profileName) {
+		return fmt.Errorf("Invalid profile name, must only contain alphanumeric characters and dashes and cannot start with a dash: %s", profileName)
+	}
+
+	// ensure profile names are no longer than 32 characters
+	if len(profileName) > 32 {
+		return fmt.Errorf("Profile name is too long, must be less than 32 characters: %s", profileName)
+	}
+
+	if err := common.PropertyDelete("scheduler-k3s", "--global", fmt.Sprintf("node-profile-%s.json", profileName)); err != nil {
+		return fmt.Errorf("Unable to delete node profile: %w", err)
+	}
+
+	common.LogInfo1(fmt.Sprintf("Node profile %s removed", profileName))
+	return nil
+}
+
 // CommandReport displays a scheduler-k3s report for one or more apps
 func CommandReport(appName string, format string, infoFlag string) error {
 	if len(appName) == 0 {

From bd98ff529925ff7e96afd27839412c5e925e5e3f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 04:56:32 -0500
Subject: [PATCH 205/427] fix: properly write the profile command files out

---
 plugins/scheduler-k3s/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/scheduler-k3s/Makefile b/plugins/scheduler-k3s/Makefile
index b873f3701..8e40a41db 100644
--- a/plugins/scheduler-k3s/Makefile
+++ b/plugins/scheduler-k3s/Makefile
@@ -1,4 +1,4 @@
-SUBCOMMANDS = subcommands/annotations:set subcommands/autoscaling-auth:set subcommands/autoscaling-auth:report subcommands/cluster-add subcommands/cluster-list subcommands/cluster-remove subcommands/ensure-charts subcommands/initialize subcommands/labels:set subcommands/report subcommands/set subcommands/show-kubeconfig subcommands/uninstall
+SUBCOMMANDS = subcommands/annotations:set subcommands/autoscaling-auth:set subcommands/autoscaling-auth:report subcommands/cluster-add subcommands/cluster-list subcommands/cluster-remove subcommands/ensure-charts subcommands/initialize subcommands/labels:set subcommands/profiles:add subcommands/profiles:list subcommands/profiles:remove subcommands/report subcommands/set subcommands/show-kubeconfig subcommands/uninstall
 TRIGGERS = triggers/core-post-deploy triggers/core-post-extract triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-create triggers/post-delete triggers/report triggers/scheduler-app-status triggers/scheduler-deploy triggers/scheduler-enter triggers/scheduler-is-deployed triggers/scheduler-logs triggers/scheduler-proxy-config triggers/scheduler-proxy-logs triggers/scheduler-post-delete triggers/scheduler-run triggers/scheduler-run-list triggers/scheduler-stop triggers/scheduler-cron-write
 BUILD = commands subcommands triggers
 PLUGIN_NAME = scheduler-k3s

From 9c1677556e4f44b6a0d32a1ecd51d55237f3e4be Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 04:56:45 -0500
Subject: [PATCH 206/427] fix: read in the profile property correctly

---
 plugins/scheduler-k3s/subcommands.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/scheduler-k3s/subcommands.go b/plugins/scheduler-k3s/subcommands.go
index f67d82591..9d72c39dd 100644
--- a/plugins/scheduler-k3s/subcommands.go
+++ b/plugins/scheduler-k3s/subcommands.go
@@ -418,7 +418,7 @@ func CommandClusterAdd(profileName string, role string, remoteHost string, serve
 	incomingProfile := NodeProfile{}
 
 	if profileName != "" {
-		properties := common.PropertyGetDefault("scheduler-k3s", "--global", fmt.Sprintf("node-profile-%s", profileName), "")
+		properties := common.PropertyGetDefault("scheduler-k3s", "--global", fmt.Sprintf("node-profile-%s.json", profileName), "")
 		if properties == "" {
 			return fmt.Errorf("Node profile %s not found", profileName)
 		}

From 0e5db7db5ca5d7995073260e51201278e72169bc Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 04:56:55 -0500
Subject: [PATCH 207/427] fix: ensure the profile is a proper json file

---
 plugins/scheduler-k3s/subcommands.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/plugins/scheduler-k3s/subcommands.go b/plugins/scheduler-k3s/subcommands.go
index 9d72c39dd..24fd074d6 100644
--- a/plugins/scheduler-k3s/subcommands.go
+++ b/plugins/scheduler-k3s/subcommands.go
@@ -1080,7 +1080,11 @@ func CommandProfilesList(format string) error {
 	}
 
 	output := []NodeProfile{}
-	for _, data := range properties {
+	for property, data := range properties {
+		if !strings.HasSuffix(property, ".json") {
+			continue
+		}
+
 		var profile NodeProfile
 		err := json.Unmarshal([]byte(data), &profile)
 		if err != nil {

From 1430c2a13e156fc63a6687f0a22fa6a46e5742f3 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 05:00:12 -0500
Subject: [PATCH 208/427] refactor: rename the scheduler-k3s:cluster-* commands
 to use a : instead of - for a delimiter

This standardizes the commands with the other k3s commands that use a colon delimiter as well.
---
 docs/appendices/0.37.0-migration-guide.md     |  3 ++
 docs/deployment/schedulers/k3s.md             | 32 +++++++++----------
 plugins/scheduler-k3s/Makefile                |  2 +-
 .../scheduler-k3s/src/commands/commands.go    |  6 ++--
 .../src/subcommands/subcommands.go            | 12 +++----
 5 files changed, 29 insertions(+), 26 deletions(-)

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
index ac01fa70f..ddc44755a 100644
--- a/docs/appendices/0.37.0-migration-guide.md
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -3,6 +3,9 @@
 ## Changes
 
 - The `app.json` file format is now parsed as JSONC and supports inline comments.
+- The `scheduler-k3s:cluster-add` command is now `scheduler-k3s:cluster:add`.
+- The `scheduler-k3s:cluster-list` command is now `scheduler-k3s:cluster:list`.
+- The `scheduler-k3s:cluster-remove` command is now `scheduler-k3s:cluster:remove`.
 
 ## Removals
 
diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index e0e96033d..2b23186ee 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -7,9 +7,9 @@
 scheduler-k3s:annotations:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear an annotation for a given app/process-type/resource-type combination
 scheduler-k3s:autoscaling-auth:set <app|--global> <trigger> [<--metadata key=value>...], Set or clear a scheduler-k3s autoscaling keda trigger authentication resource for an app
 scheduler-k3s:autoscaling-auth:report <app|--global> [--format stdout|json] [--include-metadata] # Displays a scheduler-k3s autoscaling auth report for an app
-scheduler-k3s:cluster-add [ssh://user@host:port]    # Adds a server node to a Dokku-managed cluster
-scheduler-k3s:cluster-list                          # Lists all nodes in a Dokku-managed cluster
-scheduler-k3s:cluster-remove [node-id]              # Removes client node to a Dokku-managed cluster
+scheduler-k3s:cluster:add [ssh://user@host:port]    # Adds a server node to a Dokku-managed cluster
+scheduler-k3s:cluster:list                          # Lists all nodes in a Dokku-managed cluster
+scheduler-k3s:cluster:remove [node-id]              # Removes client node to a Dokku-managed cluster
 scheduler-k3s:ensure-charts                         # Ensures the k3s charts are installed
 scheduler-k3s:initialize                            # Initializes a cluster
 scheduler-k3s:labels:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE> # Set or clear a label for a given app/process-type/resource-type combination
@@ -80,16 +80,16 @@ dokku scheduler-k3s:initialize --ingress-class traefik
 
 #### Adding a worker node
 
-Nodes that run app workloads can be added via the `scheduler-k3s:cluster-add` command. This will ssh onto the specified server, install k3s, and join it to the current Dokku node in worker mode. Workers are typically used to run app workloads.
+Nodes that run app workloads can be added via the `scheduler-k3s:cluster:add` command. This will ssh onto the specified server, install k3s, and join it to the current Dokku node in worker mode. Workers are typically used to run app workloads.
 
 ```shell
-dokku scheduler-k3s:cluster-add  ssh://root@worker-1.example.com
+dokku scheduler-k3s:cluster:add  ssh://root@worker-1.example.com
 ```
 
 Per-node kubelet flags can be supplied by passing `--kubelet-args` with a comma-separated `key=value` list. This is useful for tuning scheduler capacity or enforcing cluster-wide defaults at the node level.
 
 ```shell
-dokku scheduler-k3s:cluster-add \
+dokku scheduler-k3s:cluster:add \
   --kubelet-args allowed-unsafe-sysctls=net.ipv6.conf.all.disable_ipv6 \
   ssh://root@worker-1.example.com
 ```
@@ -97,7 +97,7 @@ dokku scheduler-k3s:cluster-add \
 Multiple kubelet arguments can be specified in the same call by separating them with commas. The following example enables IPv4 forwarding while also increasing the pod density on the worker.
 
 ```shell
-dokku scheduler-k3s:cluster-add \
+dokku scheduler-k3s:cluster:add \
   --kubelet-args allowed-unsafe-sysctls=net.ipv6.conf.all.disable_ipv6,max-pods=150 \
   ssh://root@worker-2.example.com
 ```
@@ -105,13 +105,13 @@ dokku scheduler-k3s:cluster-add \
 If the server isn't in the `known_hosts` file, the connection will fail. This can be bypassed by setting the `--insecure-allow-unknown-hosts` flag:
 
 ```shell
-dokku scheduler-k3s:cluster-add --insecure-allow-unknown-hosts ssh://root@worker-1.example.com
+dokku scheduler-k3s:cluster:add --insecure-allow-unknown-hosts ssh://root@worker-1.example.com
 ```
 
 By default, Dokku will attempt to auto-detect the IP address of the Dokku server for the remote server to connect to. In cases where the auto-detected IP address is incorrect, an override may be specified via the `--server-ip` flag:
 
 ```shell
-dokku scheduler-k3s:cluster-add --server-ip 192.168.20.15 ssh://root@worker-1.example.com
+dokku scheduler-k3s:cluster:add --server-ip 192.168.20.15 ssh://root@worker-1.example.com
 ```
 
 #### Adding a server node
@@ -121,28 +121,28 @@ dokku scheduler-k3s:cluster-add --server-ip 192.168.20.15 ssh://root@worker-1.ex
 
 Server nodes are typically used to replicate the cluster state, and it is recommended to have an odd number of nodes spread across several availability zones (datacenters in close proximity within a region). This allows for higher availability in the event of a cluster failure. Server nodes run control-plane services such as the traefik load balancer and the etcd backing store.
 
-Server nodes can also be added with the `scheduler-k3s:cluster-add` command by specifying `--role server`. This will ssh onto the specified server, install k3s, and join it to the current Dokku node in server mode.
+Server nodes can also be added with the `scheduler-k3s:cluster:add` command by specifying `--role server`. This will ssh onto the specified server, install k3s, and join it to the current Dokku node in server mode.
 
 ```shell
-dokku scheduler-k3s:cluster-add  --role server ssh://root@server-1.example.com
+dokku scheduler-k3s:cluster:add  --role server ssh://root@server-1.example.com
 ```
 
 Server nodes allow any workloads to be scheduled on them by default, in addition to the control-plane, etcd, and the scheduler itself. To avoid app workloads being scheduled on your control-plane, use the `--taint-scheduling` flag:
 
 ```shell
-dokku scheduler-k3s:cluster-add --role server --taint-scheduling ssh://root@server-1.example.com
+dokku scheduler-k3s:cluster:add --role server --taint-scheduling ssh://root@server-1.example.com
 ```
 
 If the server isn't in the `known_hosts` file, the connection will fail. This can be bypassed by setting the `--insecure-allow-unknown-hosts` flag:
 
 ```shell
-dokku scheduler-k3s:cluster-add --role server --insecure-allow-unknown-hosts ssh://root@server-1.example.com
+dokku scheduler-k3s:cluster:add --role server --insecure-allow-unknown-hosts ssh://root@server-1.example.com
 ```
 
 By default, Dokku will attempt to auto-detect the IP address of the Dokku server for the remote server to connect to. In cases where the auto-detected IP address is incorrect, an override may be specified via the `--server-ip` flag:
 
 ```shell
-dokku scheduler-k3s:cluster-add --role server --server-ip 192.168.20.15 ssh://root@server-1.example.com
+dokku scheduler-k3s:cluster:add --role server --server-ip 192.168.20.15 ssh://root@server-1.example.com
 ```
 
 #### Changing the network interface
@@ -155,7 +155,7 @@ dokku scheduler-k3s:set --global network-interface eth1
 
 ### Node Profiles
 
-Node profiles capture repeatable `scheduler-k3s:cluster-add` options so you can join multiple nodes with identical settings. A profile name can be specified for the `scheduler-k3s:cluster-add` command via the  `--profile <name>` flag. Any flags passed directly to `scheduler-k3s:cluster-add` override the stored values for that run.
+Node profiles capture repeatable `scheduler-k3s:cluster:add` options so you can join multiple nodes with identical settings. A profile name can be specified for the `scheduler-k3s:cluster:add` command via the  `--profile <name>` flag. Any flags passed directly to `scheduler-k3s:cluster:add` override the stored values for that run.
 
 #### Listing profiles
 
@@ -183,7 +183,7 @@ dokku scheduler-k3s:profiles:add edge-workers \
   --kubelet-args protect-kernel-defaults=true,eviction-hard=memory.available<200Mi
 ```
 
-Profile names must be alphanumeric, may include internal dashes, cannot start/end with a dash, and must be ≤32 characters. Other than the `--server-ip` flag, all flags used for `scheduler-k3s:cluster-add` are valid for the `scheduler-k3s:profiles:add` command.
+Profile names must be alphanumeric, may include internal dashes, cannot start/end with a dash, and must be ≤32 characters. Other than the `--server-ip` flag, all flags used for `scheduler-k3s:cluster:add` are valid for the `scheduler-k3s:profiles:add` command.
 
 #### scheduler-k3s:profiles:remove
 
diff --git a/plugins/scheduler-k3s/Makefile b/plugins/scheduler-k3s/Makefile
index 8e40a41db..3c46a33ef 100644
--- a/plugins/scheduler-k3s/Makefile
+++ b/plugins/scheduler-k3s/Makefile
@@ -1,4 +1,4 @@
-SUBCOMMANDS = subcommands/annotations:set subcommands/autoscaling-auth:set subcommands/autoscaling-auth:report subcommands/cluster-add subcommands/cluster-list subcommands/cluster-remove subcommands/ensure-charts subcommands/initialize subcommands/labels:set subcommands/profiles:add subcommands/profiles:list subcommands/profiles:remove subcommands/report subcommands/set subcommands/show-kubeconfig subcommands/uninstall
+SUBCOMMANDS = subcommands/annotations:set subcommands/autoscaling-auth:set subcommands/autoscaling-auth:report subcommands/cluster:add subcommands/cluster:list subcommands/cluster:remove subcommands/ensure-charts subcommands/initialize subcommands/labels:set subcommands/profiles:add subcommands/profiles:list subcommands/profiles:remove subcommands/report subcommands/set subcommands/show-kubeconfig subcommands/uninstall
 TRIGGERS = triggers/core-post-deploy triggers/core-post-extract triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-create triggers/post-delete triggers/report triggers/scheduler-app-status triggers/scheduler-deploy triggers/scheduler-enter triggers/scheduler-is-deployed triggers/scheduler-logs triggers/scheduler-proxy-config triggers/scheduler-proxy-logs triggers/scheduler-post-delete triggers/scheduler-run triggers/scheduler-run-list triggers/scheduler-stop triggers/scheduler-cron-write
 BUILD = commands subcommands triggers
 PLUGIN_NAME = scheduler-k3s
diff --git a/plugins/scheduler-k3s/src/commands/commands.go b/plugins/scheduler-k3s/src/commands/commands.go
index 6ae1ac040..e5b51b68d 100644
--- a/plugins/scheduler-k3s/src/commands/commands.go
+++ b/plugins/scheduler-k3s/src/commands/commands.go
@@ -19,9 +19,9 @@ Additional commands:`
 	helpContent = `
     scheduler-k3s:autoscaling-auth:set <app|--global> <trigger> [<--metadata key=value>...], Set or clear a scheduler-k3s autoscaling keda trigger authentication resource for an app
     scheduler-k3s:annotations:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear an annotation for a given app/process-type/resource-type combination
-    scheduler-k3s:cluster-add [--profile PROFILE] [--role ROLE] [--insecure-allow-unknown-hosts] [--server-ip SERVER_IP] [--taint-scheduling] [--kubelet-args KUBELET_ARGS] <ssh://user@host:port>, Adds a server node to a Dokku-managed cluster
-    scheduler-k3s:cluster-list [--format json|stdout], Lists all nodes in a Dokku-managed cluster
-    scheduler-k3s:cluster-remove [node-id], Removes client node to a Dokku-managed cluster
+    scheduler-k3s:cluster:add [--profile PROFILE] [--role ROLE] [--insecure-allow-unknown-hosts] [--server-ip SERVER_IP] [--taint-scheduling] [--kubelet-args KUBELET_ARGS] <ssh://user@host:port>, Adds a server node to a Dokku-managed cluster
+    scheduler-k3s:cluster:list [--format json|stdout], Lists all nodes in a Dokku-managed cluster
+    scheduler-k3s:cluster:remove [node-id], Removes client node to a Dokku-managed cluster
     scheduler-k3s:ensure-charts, Ensures the k3s charts are installed
     scheduler-k3s:initialize [--server-ip SERVER_IP] [--taint-scheduling], Initializes a cluster
     scheduler-k3s:labels:set <app|--global> <property> (<value>) [--process-type PROCESS_TYPE] <--resource-type RESOURCE_TYPE>, Set or clear a label for a given app/process-type/resource-type combination
diff --git a/plugins/scheduler-k3s/src/subcommands/subcommands.go b/plugins/scheduler-k3s/src/subcommands/subcommands.go
index d91bc9583..7a950f1ec 100644
--- a/plugins/scheduler-k3s/src/subcommands/subcommands.go
+++ b/plugins/scheduler-k3s/src/subcommands/subcommands.go
@@ -54,8 +54,8 @@ func main() {
 		args.Parse(os.Args[2:])
 		appName := args.Arg(0)
 		err = scheduler_k3s.CommandAutoscalingAuthReport(appName, *format, *global, *includeMetadata)
-	case "cluster-add":
-		args := flag.NewFlagSet("scheduler-k3s:cluster-add", flag.ExitOnError)
+	case "cluster:add":
+		args := flag.NewFlagSet("scheduler-k3s:cluster:add", flag.ExitOnError)
 		allowUknownHosts := args.Bool("insecure-allow-unknown-hosts", false, "insecure-allow-unknown-hosts: allow unknown hosts")
 		taintScheduling := args.Bool("taint-scheduling", false, "taint-scheduling: add a taint against scheduling app workloads")
 		serverIP := args.String("server-ip", "", "server-ip: IP address of the dokku server node")
@@ -65,13 +65,13 @@ func main() {
 		args.Parse(os.Args[2:])
 		remoteHost := args.Arg(0)
 		err = scheduler_k3s.CommandClusterAdd(*profileName, *role, remoteHost, *serverIP, *allowUknownHosts, *taintScheduling, *kubeletArgs)
-	case "cluster-list":
-		args := flag.NewFlagSet("scheduler-k3s:cluster-list", flag.ExitOnError)
+	case "cluster:list":
+		args := flag.NewFlagSet("scheduler-k3s:cluster:list", flag.ExitOnError)
 		format := args.String("format", "stdout", "format: [ stdout | json ]")
 		args.Parse(os.Args[2:])
 		err = scheduler_k3s.CommandClusterList(*format)
-	case "cluster-remove":
-		args := flag.NewFlagSet("scheduler-k3s:cluster-remove", flag.ExitOnError)
+	case "cluster:remove":
+		args := flag.NewFlagSet("scheduler-k3s:cluster:remove", flag.ExitOnError)
 		args.Parse(os.Args[2:])
 		nodeName := args.Arg(0)
 		err = scheduler_k3s.CommandClusterRemove(nodeName)

From 49813a2a54876abfbe1cbc0ba711db63fa7565af Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 20 Nov 2025 03:36:38 +0000
Subject: [PATCH 209/427] chore(deps): bump golang.org/x/crypto in
 /plugins/common

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/common/go.mod | 10 +++++-----
 plugins/common/go.sum | 28 ++++++++++++++--------------
 2 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/plugins/common/go.mod b/plugins/common/go.mod
index e17ee094b..a15854d3f 100644
--- a/plugins/common/go.mod
+++ b/plugins/common/go.mod
@@ -11,8 +11,8 @@ require (
 	github.com/otiai10/copy v1.14.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	golang.org/x/crypto v0.43.0
-	golang.org/x/sync v0.17.0
+	golang.org/x/crypto v0.45.0
+	golang.org/x/sync v0.18.0
 )
 
 require (
@@ -25,8 +25,8 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/net v0.45.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
-	golang.org/x/text v0.30.0 // indirect
+	golang.org/x/net v0.47.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
diff --git a/plugins/common/go.sum b/plugins/common/go.sum
index a30e66fb0..be0aeee97 100644
--- a/plugins/common/go.sum
+++ b/plugins/common/go.sum
@@ -57,20 +57,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -81,25 +81,25 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.37.0 h1:DVSRzp7FwePZW356yEAChSdNcQo6Nsp+fex1SUW09lE=
-golang.org/x/tools v0.37.0/go.mod h1:MBN5QPQtLMHVdvsbtarmTNukZDdgwdwlO5qGacAzF0w=
+golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
+golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

From a6b6b08e3e76b3866482e45262b1393e0e5fd4d3 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 20 Nov 2025 10:47:44 -0500
Subject: [PATCH 210/427] chore: bump go modules and run go mod tidy

---
 plugins/app-json/go.mod               |  6 ++---
 plugins/app-json/go.sum               | 24 ++++++++++----------
 plugins/apps/go.mod                   |  6 ++---
 plugins/apps/go.sum                   | 24 ++++++++++----------
 plugins/builder/go.mod                |  6 ++---
 plugins/builder/go.sum                | 24 ++++++++++----------
 plugins/buildpacks/go.mod             |  6 ++---
 plugins/buildpacks/go.sum             | 24 ++++++++++----------
 plugins/config/go.mod                 | 10 ++++-----
 plugins/config/go.sum                 | 28 +++++++++++------------
 plugins/cron/go.mod                   |  6 ++---
 plugins/cron/go.sum                   | 24 ++++++++++----------
 plugins/docker-options/go.mod         |  6 ++---
 plugins/docker-options/go.sum         | 24 ++++++++++----------
 plugins/logs/go.mod                   |  6 ++---
 plugins/logs/go.sum                   | 24 ++++++++++----------
 plugins/network/go.mod                |  6 ++---
 plugins/network/go.sum                | 24 ++++++++++----------
 plugins/nginx-vhosts/go.mod           |  6 ++---
 plugins/nginx-vhosts/go.sum           | 24 ++++++++++----------
 plugins/ports/go.mod                  |  6 ++---
 plugins/ports/go.sum                  | 24 ++++++++++----------
 plugins/proxy/go.mod                  |  6 ++---
 plugins/proxy/go.sum                  | 24 ++++++++++----------
 plugins/ps/go.mod                     |  6 ++---
 plugins/ps/go.sum                     | 24 ++++++++++----------
 plugins/registry/go.mod               |  6 ++---
 plugins/registry/go.sum               | 24 ++++++++++----------
 plugins/repo/go.mod                   |  6 ++---
 plugins/repo/go.sum                   | 24 ++++++++++----------
 plugins/resource/go.mod               |  6 ++---
 plugins/resource/go.sum               | 24 ++++++++++----------
 plugins/scheduler-docker-local/go.mod |  6 ++---
 plugins/scheduler-docker-local/go.sum | 24 ++++++++++----------
 plugins/scheduler-k3s/go.mod          | 16 +++++++-------
 plugins/scheduler-k3s/go.sum          | 32 +++++++++++++--------------
 plugins/scheduler/go.mod              |  6 ++---
 plugins/scheduler/go.sum              | 24 ++++++++++----------
 38 files changed, 298 insertions(+), 298 deletions(-)

diff --git a/plugins/app-json/go.mod b/plugins/app-json/go.mod
index dea24b213..bdc6c3ea2 100644
--- a/plugins/app-json/go.mod
+++ b/plugins/app-json/go.mod
@@ -25,9 +25,9 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	github.com/stretchr/testify v1.8.4 // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index d78d4f859..b16ac18a5 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -51,20 +51,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -75,20 +75,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/apps/go.mod b/plugins/apps/go.mod
index 1555b5210..72a0d5103 100644
--- a/plugins/apps/go.mod
+++ b/plugins/apps/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/apps/go.sum b/plugins/apps/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/apps/go.sum
+++ b/plugins/apps/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/builder/go.mod b/plugins/builder/go.mod
index a2a939634..680ca339b 100644
--- a/plugins/builder/go.mod
+++ b/plugins/builder/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/builder/go.sum b/plugins/builder/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/builder/go.sum
+++ b/plugins/builder/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/buildpacks/go.mod b/plugins/buildpacks/go.mod
index fe29ebd1c..bb63268ed 100644
--- a/plugins/buildpacks/go.mod
+++ b/plugins/buildpacks/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/buildpacks/go.sum b/plugins/buildpacks/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/buildpacks/go.sum
+++ b/plugins/buildpacks/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/config/go.mod b/plugins/config/go.mod
index 3f3267044..eb8240143 100644
--- a/plugins/config/go.mod
+++ b/plugins/config/go.mod
@@ -25,11 +25,11 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/net v0.45.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
-	golang.org/x/text v0.30.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/net v0.47.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/config/go.sum b/plugins/config/go.sum
index 5d013aba1..3b3ded9af 100644
--- a/plugins/config/go.sum
+++ b/plugins/config/go.sum
@@ -59,20 +59,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -83,25 +83,25 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.37.0 h1:DVSRzp7FwePZW356yEAChSdNcQo6Nsp+fex1SUW09lE=
-golang.org/x/tools v0.37.0/go.mod h1:MBN5QPQtLMHVdvsbtarmTNukZDdgwdwlO5qGacAzF0w=
+golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
+golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
diff --git a/plugins/cron/go.mod b/plugins/cron/go.mod
index ec154b9e2..bb5b74126 100644
--- a/plugins/cron/go.mod
+++ b/plugins/cron/go.mod
@@ -27,9 +27,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
 )
 
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index b6ad7c9eb..1872506eb 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -63,20 +63,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -87,20 +87,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/docker-options/go.mod b/plugins/docker-options/go.mod
index 1dd7dcb5a..9a2944220 100644
--- a/plugins/docker-options/go.mod
+++ b/plugins/docker-options/go.mod
@@ -18,9 +18,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/docker-options/go.sum b/plugins/docker-options/go.sum
index 640550c8f..0bafcc939 100644
--- a/plugins/docker-options/go.sum
+++ b/plugins/docker-options/go.sum
@@ -43,20 +43,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -67,20 +67,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/logs/go.mod b/plugins/logs/go.mod
index 11b7e4b71..1640e80b0 100644
--- a/plugins/logs/go.mod
+++ b/plugins/logs/go.mod
@@ -23,9 +23,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/logs/go.sum b/plugins/logs/go.sum
index bd483188f..5307e963b 100644
--- a/plugins/logs/go.sum
+++ b/plugins/logs/go.sum
@@ -47,20 +47,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -71,20 +71,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/network/go.mod b/plugins/network/go.mod
index 4be624b3d..244eeaf96 100644
--- a/plugins/network/go.mod
+++ b/plugins/network/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/network/go.sum b/plugins/network/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/network/go.sum
+++ b/plugins/network/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/nginx-vhosts/go.mod b/plugins/nginx-vhosts/go.mod
index 85a791479..78af20eeb 100644
--- a/plugins/nginx-vhosts/go.mod
+++ b/plugins/nginx-vhosts/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/nginx-vhosts/go.sum b/plugins/nginx-vhosts/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/nginx-vhosts/go.sum
+++ b/plugins/nginx-vhosts/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/ports/go.mod b/plugins/ports/go.mod
index 884d6ac01..40a9e8541 100644
--- a/plugins/ports/go.mod
+++ b/plugins/ports/go.mod
@@ -23,9 +23,9 @@ require (
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/ports/go.sum b/plugins/ports/go.sum
index ffde9129f..08c69bc02 100644
--- a/plugins/ports/go.sum
+++ b/plugins/ports/go.sum
@@ -47,20 +47,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -71,20 +71,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/proxy/go.mod b/plugins/proxy/go.mod
index e25adec8c..8ce408199 100644
--- a/plugins/proxy/go.mod
+++ b/plugins/proxy/go.mod
@@ -23,9 +23,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/proxy/go.sum b/plugins/proxy/go.sum
index ffde9129f..08c69bc02 100644
--- a/plugins/proxy/go.sum
+++ b/plugins/proxy/go.sum
@@ -47,20 +47,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -71,20 +71,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/ps/go.mod b/plugins/ps/go.mod
index 7ab0c98ee..a5d216196 100644
--- a/plugins/ps/go.mod
+++ b/plugins/ps/go.mod
@@ -25,9 +25,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/ps/go.sum b/plugins/ps/go.sum
index f80d44ed0..90902860d 100644
--- a/plugins/ps/go.sum
+++ b/plugins/ps/go.sum
@@ -51,20 +51,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -75,20 +75,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/registry/go.mod b/plugins/registry/go.mod
index 46ec89881..bff280aec 100644
--- a/plugins/registry/go.mod
+++ b/plugins/registry/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/registry/go.sum b/plugins/registry/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/registry/go.sum
+++ b/plugins/registry/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/repo/go.mod b/plugins/repo/go.mod
index 14514baba..c6c205b32 100644
--- a/plugins/repo/go.mod
+++ b/plugins/repo/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/repo/go.sum b/plugins/repo/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/repo/go.sum
+++ b/plugins/repo/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/resource/go.mod b/plugins/resource/go.mod
index 387b4409a..5e3ea2d21 100644
--- a/plugins/resource/go.mod
+++ b/plugins/resource/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/resource/go.sum b/plugins/resource/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/resource/go.sum
+++ b/plugins/resource/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/scheduler-docker-local/go.mod b/plugins/scheduler-docker-local/go.mod
index 7a1ae9bc3..ba4124707 100644
--- a/plugins/scheduler-docker-local/go.mod
+++ b/plugins/scheduler-docker-local/go.mod
@@ -6,7 +6,7 @@ require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/dokku/dokku/plugins/cron v0.0.0-00010101000000-000000000000
 	github.com/multiformats/go-base36 v0.2.0
-	golang.org/x/sync v0.17.0
+	golang.org/x/sync v0.18.0
 )
 
 require (
@@ -27,8 +27,8 @@ require (
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
 	mvdan.cc/sh/v3 v3.12.0 // indirect
 )
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index bf0d48337..0b963e588 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -61,20 +61,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -85,20 +85,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 1fd43a278..b4280cd18 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	github.com/traefik/traefik/v2 v2.11.30
-	golang.org/x/sync v0.17.0
+	golang.org/x/sync v0.18.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.0
 	k8s.io/api v0.34.1
@@ -145,15 +145,15 @@ require (
 	github.com/xlab/treeprint v1.2.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/mod v0.28.0 // indirect
-	golang.org/x/net v0.46.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/mod v0.29.0 // indirect
+	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/oauth2 v0.31.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
-	golang.org/x/term v0.36.0 // indirect
-	golang.org/x/text v0.30.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/term v0.37.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
 	golang.org/x/time v0.13.0 // indirect
-	golang.org/x/tools v0.37.0 // indirect
+	golang.org/x/tools v0.38.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250929231259-57b25ae835d4 // indirect
 	google.golang.org/grpc v1.75.1 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index c1a24645d..4c07623a8 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -422,8 +422,8 @@ golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliY
 golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
 golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
@@ -431,8 +431,8 @@ golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.28.0 h1:gQBtGhjxykdjY9YhZpSlZIsbnaE2+PgjfLWUQTnoZ1U=
-golang.org/x/mod v0.28.0/go.mod h1:yfB/L0NOf/kmEbXjzCPOx1iK1fRutOydrCMsqRhEBxI=
+golang.org/x/mod v0.29.0 h1:HV8lRxZC4l2cr3Zq1LvtOsi/ThTgWnUk/y64QSs8GwA=
+golang.org/x/mod v0.29.0/go.mod h1:NyhrlYXJ2H4eJiRy/WDBO6HMqZQ6q9nk4JzS3NuCK+w=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
@@ -445,8 +445,8 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
 golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
-golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
-golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo=
 golang.org/x/oauth2 v0.31.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -458,8 +458,8 @@ golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -478,8 +478,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -489,8 +489,8 @@ golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
 golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -501,8 +501,8 @@ golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/time v0.13.0 h1:eUlYslOIt32DgYD6utsuUeHs4d7AsEYLuIAdg7FlYgI=
 golang.org/x/time v0.13.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
@@ -513,8 +513,8 @@ golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
-golang.org/x/tools v0.37.0 h1:DVSRzp7FwePZW356yEAChSdNcQo6Nsp+fex1SUW09lE=
-golang.org/x/tools v0.37.0/go.mod h1:MBN5QPQtLMHVdvsbtarmTNukZDdgwdwlO5qGacAzF0w=
+golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
+golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
diff --git a/plugins/scheduler/go.mod b/plugins/scheduler/go.mod
index acd620db4..3047b7cd2 100644
--- a/plugins/scheduler/go.mod
+++ b/plugins/scheduler/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/scheduler/go.sum b/plugins/scheduler/go.sum
index 1890e716f..b7e13e975 100644
--- a/plugins/scheduler/go.sum
+++ b/plugins/scheduler/go.sum
@@ -45,20 +45,20 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
-golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug=
-golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
+golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=

From 1de6b4ad42c3e0b08cf2c40224bd1e1cbf68d8b4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Nov 2025 15:08:12 +0000
Subject: [PATCH 211/427] chore(deps): bump sigs.k8s.io/kustomize/api in
 /plugins/scheduler-k3s

Bumps [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) from 0.20.1 to 0.21.0.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](https://github.com/kubernetes-sigs/kustomize/compare/api/v0.20.1...api/v0.21.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod |  5 ++---
 plugins/scheduler-k3s/go.sum | 18 ++++++------------
 2 files changed, 8 insertions(+), 15 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index b4280cd18..a59a38828 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -33,7 +33,7 @@ require (
 	k8s.io/kubernetes v1.34.1
 	k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d
 	mvdan.cc/sh/v3 v3.12.0
-	sigs.k8s.io/kustomize/api v0.20.1
+	sigs.k8s.io/kustomize/api v0.21.0
 )
 
 require (
@@ -134,7 +134,6 @@ require (
 	github.com/rubenv/sql-migrate v1.8.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
-	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/spf13/cast v1.10.0 // indirect
@@ -171,7 +170,7 @@ require (
 	sigs.k8s.io/controller-runtime v0.22.3 // indirect
 	sigs.k8s.io/gateway-api v1.4.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
-	sigs.k8s.io/kustomize/kyaml v0.20.1 // indirect
+	sigs.k8s.io/kustomize/kyaml v0.21.0 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
 	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 4c07623a8..ca0c1560d 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -202,11 +202,8 @@ github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zt
 github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
-github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
-github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
-github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
@@ -315,8 +312,8 @@ github.com/ryanuber/columnize v2.1.2+incompatible h1:C89EOx/XBWwIXl8wm8OPJBd7kPF
 github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
 github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ=
 github.com/santhosh-tekuri/jsonschema/v6 v6.0.2/go.mod h1:JXeL+ps8p7/KNMjDQk3TCwPpBy0wYklyWTfbkIzdIFU=
-github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
-github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
+github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw=
+github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
 github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k=
 github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
@@ -334,7 +331,6 @@ github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY=
 github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
-github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
@@ -531,14 +527,12 @@ google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr
 google.golang.org/protobuf v1.36.9 h1:w2gp2mA27hUeUzj9Ex9FBjsBm40zfaDtEWow293U7Iw=
 google.golang.org/protobuf v1.36.9/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/evanphx/json-patch.v4 v4.13.0 h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo=
 gopkg.in/evanphx/json-patch.v4 v4.13.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
-gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
@@ -582,10 +576,10 @@ sigs.k8s.io/gateway-api v1.4.0 h1:ZwlNM6zOHq0h3WUX2gfByPs2yAEsy/EenYJB78jpQfQ=
 sigs.k8s.io/gateway-api v1.4.0/go.mod h1:AR5RSqciWP98OPckEjOjh2XJhAe2Na4LHyXD2FUY7Qk=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
-sigs.k8s.io/kustomize/api v0.20.1 h1:iWP1Ydh3/lmldBnH/S5RXgT98vWYMaTUL1ADcr+Sv7I=
-sigs.k8s.io/kustomize/api v0.20.1/go.mod h1:t6hUFxO+Ph0VxIk1sKp1WS0dOjbPCtLJ4p8aADLwqjM=
-sigs.k8s.io/kustomize/kyaml v0.20.1 h1:PCMnA2mrVbRP3NIB6v9kYCAc38uvFLVs8j/CD567A78=
-sigs.k8s.io/kustomize/kyaml v0.20.1/go.mod h1:0EmkQHRUsJxY8Ug9Niig1pUMSCGHxQ5RklbpV/Ri6po=
+sigs.k8s.io/kustomize/api v0.21.0 h1:I7nry5p8iDJbuRdYS7ez8MUvw7XVNPcIP5GkzzuXIIQ=
+sigs.k8s.io/kustomize/api v0.21.0/go.mod h1:XGVQuR5n2pXKWbzXHweZU683pALGw/AMVO4zU4iS8SE=
+sigs.k8s.io/kustomize/kyaml v0.21.0 h1:7mQAf3dUwf0wBerWJd8rXhVcnkk5Tvn/q91cGkaP6HQ=
+sigs.k8s.io/kustomize/kyaml v0.21.0/go.mod h1:hmxADesM3yUN2vbA5z1/YTBnzLJ1dajdqpQonwBL1FQ=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
 sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
 sigs.k8s.io/structured-merge-diff/v6 v6.3.0 h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco=

From 4d896b22d01091f5771dfd2e8f139407aaf31688 Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Thu, 20 Nov 2025 23:06:11 +0000
Subject: [PATCH 212/427] Release 0.37.0

# History

## 0.37.0

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.0/bootstrap.sh
sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh
```

See the [0.37.0 migration guide](/docs/appendices/0.37.0-migration-guide.md) for more information on migrating to 0.37.0.

### Backwards Compatibility Breaks

- #8140: @josegonzalez Rename the scheduler-k3s:cluster-* commands to use a : instead of - for a delimiter
- #7982: @josegonzalez Remove references to pack being experimental

### Bug Fixes

- #8136: @josegonzalez Do not reset manually set port mappings when upgrading dokku
- #8114: @josegonzalez Ensure we can execute run commands when exec is executed as part of an entrypoint
- #8109: @josegonzalez Allow skipping the install trigger when installing a plugin
- #8104: @josegonzalez Drop deprecated aufs check
- #8100: @othercorey Add process-type label for run with procfile cmd

### New Features

- #8139: @josegonzalez Add aliases for select builder and scheduler plugins
- #8138: @josegonzalez Turn on buildpack trace mode when dokku trace is on
- #8137: @josegonzalez Add the ability to create k3s node profiles
- #8135: @josegonzalez Add support for git remotes with port specified inline
- #8112: @josegonzalez Implement cron and one-off run task TTLs
- #8106: @josegonzalez Support inline comments for app.json
- #8105: @josegonzalez Allow specifying kubelet-args when adding a new node to the cluster
- #8085: @josegonzalez Implement config:import command
- #8004: @Tashows Add buildpacks:detect subcommand
- #7991: @josegonzalez Add ability to pause/restart cron jobs
- #7989: @josegonzalez Add support to prevent overlapping execution of cron tasks
- #7986: @josegonzalez Add support for specifying CNB buildpacks via buildpacks command
- #7956: @josegonzalez Add a Railpack builder to Dokku
- #7608: @dragonhunt02 Add commands to proxy implementations for managing labels

### Refactors

- #8101: @josegonzalez Filter build docker-options correctly for each builder

### Documentation

- #8103: @josegonzalez Correct the release version for railpacks support

### Dependencies

- #8130: @dependabot[bot] chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /plugins/common
- #8110: @dependabot[bot] chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /tests/apps/gogrpc
- #8108: @dependabot[bot] chore(deps): bump js-yaml from 3.14.1 to 3.14.2 in /tests/apps/multi
- #8107: @dependabot[bot] chore(deps): bump click from 8.3.0 to 8.3.1 in /docs/_build
- #8098: @dependabot[bot] chore(deps): bump traefik from 3.5.4 to 3.6.1 in /plugins/traefik-vhosts
- #8097: @dependabot[bot] chore(deps): bump timberio/vector from 0.51.0-debian to 0.51.1-debian in /plugins/logs
- #8094: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.16.1 to 10.17.1 in /docs/_build
- #8092: @dependabot[bot] chore(deps): bump mkdocs-material from 9.6.23 to 9.7.0 in /docs/_build
- #8090: @dependabot[bot] chore(deps): bump sigs.k8s.io/kustomize/api from 0.20.1 to 0.21.0 in /plugins/scheduler-k3s
---
 HISTORY.md                                 | 61 ++++++++++++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 ++++++++++----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/versions.json                  |  3 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++-------
 docs/template.html                         | 36 ++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 56 files changed, 194 insertions(+), 132 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index c400b2aa1..04fc55999 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,66 @@
 # History
 
+## 0.37.0
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.0/bootstrap.sh
+sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh
+```
+
+See the [0.37.0 migration guide](/docs/appendices/0.37.0-migration-guide.md) for more information on migrating to 0.37.0.
+
+### Backwards Compatibility Breaks
+
+- #8140: @josegonzalez Rename the scheduler-k3s:cluster-* commands to use a : instead of - for a delimiter
+- #7982: @josegonzalez Remove references to pack being experimental
+
+### Bug Fixes
+
+- #8136: @josegonzalez Do not reset manually set port mappings when upgrading dokku
+- #8114: @josegonzalez Ensure we can execute run commands when exec is executed as part of an entrypoint
+- #8109: @josegonzalez Allow skipping the install trigger when installing a plugin
+- #8104: @josegonzalez Drop deprecated aufs check
+- #8100: @othercorey Add process-type label for run with procfile cmd
+
+### New Features
+
+- #8139: @josegonzalez Add aliases for select builder and scheduler plugins
+- #8138: @josegonzalez Turn on buildpack trace mode when dokku trace is on
+- #8137: @josegonzalez Add the ability to create k3s node profiles
+- #8135: @josegonzalez Add support for git remotes with port specified inline
+- #8112: @josegonzalez Implement cron and one-off run task TTLs
+- #8106: @josegonzalez Support inline comments for app.json
+- #8105: @josegonzalez Allow specifying kubelet-args when adding a new node to the cluster
+- #8085: @josegonzalez Implement config:import command
+- #8004: @Tashows Add buildpacks:detect subcommand
+- #7991: @josegonzalez Add ability to pause/restart cron jobs
+- #7989: @josegonzalez Add support to prevent overlapping execution of cron tasks
+- #7986: @josegonzalez Add support for specifying CNB buildpacks via buildpacks command
+- #7956: @josegonzalez Add a Railpack builder to Dokku
+- #7608: @dragonhunt02 Add commands to proxy implementations for managing labels
+
+### Refactors
+
+- #8101: @josegonzalez Filter build docker-options correctly for each builder
+
+### Documentation
+
+- #8103: @josegonzalez Correct the release version for railpacks support
+
+### Dependencies
+
+- #8130: @dependabot[bot] chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /plugins/common
+- #8110: @dependabot[bot] chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /tests/apps/gogrpc
+- #8108: @dependabot[bot] chore(deps): bump js-yaml from 3.14.1 to 3.14.2 in /tests/apps/multi
+- #8107: @dependabot[bot] chore(deps): bump click from 8.3.0 to 8.3.1 in /docs/_build
+- #8098: @dependabot[bot] chore(deps): bump traefik from 3.5.4 to 3.6.1 in /plugins/traefik-vhosts
+- #8097: @dependabot[bot] chore(deps): bump timberio/vector from 0.51.0-debian to 0.51.1-debian in /plugins/logs
+- #8094: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.16.1 to 10.17.1 in /docs/_build
+- #8092: @dependabot[bot] chore(deps): bump mkdocs-material from 9.6.23 to 9.7.0 in /docs/_build
+- #8090: @dependabot[bot] chore(deps): bump sigs.k8s.io/kustomize/api from 0.20.1 to 0.21.0 in /plugins/scheduler-k3s
+
 ## 0.36.11
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index b00dd56d9..3c2d2b7a9 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.36.11/bootstrap.sh
-sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.0/bootstrap.sh
+sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index c6679c1fd..9fa5ff11d 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.36.11
+Version: 0.37.0
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 9da9d35fb..af01a7045 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.36.11 enabled    dokku core standard plugin
-  20_events            0.36.11 enabled    dokku core events logging plugin
-  app-json             0.36.11 enabled    dokku core app-json plugin
-  apps                 0.36.11 enabled    dokku core apps plugin
-  build-env            0.36.11 enabled    dokku core build-env plugin
-  buildpacks           0.36.11 enabled    dokku core buildpacks plugin
-  certs                0.36.11 enabled    dokku core certificate management plugin
-  checks               0.36.11 enabled    dokku core checks plugin
-  common               0.36.11 enabled    dokku core common plugin
-  config               0.36.11 enabled    dokku core config plugin
-  docker-options       0.36.11 enabled    dokku core docker-options plugin
-  domains              0.36.11 enabled    dokku core domains plugin
-  enter                0.36.11 enabled    dokku core enter plugin
-  git                  0.36.11 enabled    dokku core git plugin
-  logs                 0.36.11 enabled    dokku core logs plugin
-  network              0.36.11 enabled    dokku core network plugin
-  nginx-vhosts         0.36.11 enabled    dokku core nginx-vhosts plugin
-  plugin               0.36.11 enabled    dokku core plugin plugin
-  proxy                0.36.11 enabled    dokku core proxy plugin
-  ps                   0.36.11 enabled    dokku core ps plugin
-  repo                 0.36.11 enabled    dokku core repo plugin
-  resource             0.36.11 enabled    dokku core resource plugin
-  scheduler-docker-local 0.36.11 enabled    dokku core scheduler-docker-local plugin
-  shell                0.36.11 enabled    dokku core shell plugin
-  ssh-keys             0.36.11 enabled    dokku core ssh-keys plugin
-  storage              0.36.11 enabled    dokku core storage plugin
-  tags                 0.36.11 enabled    dokku core tags plugin
-  tar                  0.36.11 enabled    dokku core tar plugin
-  trace                0.36.11 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.0 enabled    dokku core standard plugin
+  20_events            0.37.0 enabled    dokku core events logging plugin
+  app-json             0.37.0 enabled    dokku core app-json plugin
+  apps                 0.37.0 enabled    dokku core apps plugin
+  build-env            0.37.0 enabled    dokku core build-env plugin
+  buildpacks           0.37.0 enabled    dokku core buildpacks plugin
+  certs                0.37.0 enabled    dokku core certificate management plugin
+  checks               0.37.0 enabled    dokku core checks plugin
+  common               0.37.0 enabled    dokku core common plugin
+  config               0.37.0 enabled    dokku core config plugin
+  docker-options       0.37.0 enabled    dokku core docker-options plugin
+  domains              0.37.0 enabled    dokku core domains plugin
+  enter                0.37.0 enabled    dokku core enter plugin
+  git                  0.37.0 enabled    dokku core git plugin
+  logs                 0.37.0 enabled    dokku core logs plugin
+  network              0.37.0 enabled    dokku core network plugin
+  nginx-vhosts         0.37.0 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.0 enabled    dokku core plugin plugin
+  proxy                0.37.0 enabled    dokku core proxy plugin
+  ps                   0.37.0 enabled    dokku core ps plugin
+  repo                 0.37.0 enabled    dokku core repo plugin
+  resource             0.37.0 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.0 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.0 enabled    dokku core shell plugin
+  ssh-keys             0.37.0 enabled    dokku core ssh-keys plugin
+  storage              0.37.0 enabled    dokku core storage plugin
+  tags                 0.37.0 enabled    dokku core tags plugin
+  tar                  0.37.0 enabled    dokku core tar plugin
+  trace                0.37.0 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index 1f0ccdfed..180622416 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 613006a2e..d87939b40 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.36.11\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index 882e14b83..e587ecd7a 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -33,6 +33,7 @@
     "0.33.9",
     "0.34.9",
     "0.35.20",
-    "0.36.11"
+    "0.36.11",
+    "0.37.0"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 534bffad4..d1cf82ed5 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.36.11-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.0-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 53c4f9dd7..84dbdc880 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.36.11
+docker pull dokku/dokku:0.37.0
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.36.11
+  dokku/dokku:0.37.0
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.36.11
+    image: dokku/dokku:0.37.0
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command. Note that the version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.36.11
+FROM dokku/dokku:0.37.0
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index a5ef5a886..41239619b 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -37,8 +37,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.36.11/bootstrap.sh
-sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.0/bootstrap.sh
+sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index 593796f0b..58ef033b2 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.36.11</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.0</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.36.11 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 9e26b3759..a2fb46b5b 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.36.11/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 3f77d2252..ec367b7b0 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index 1c186e123..69f036915 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index bc56be909..94e9a31f4 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index d358f365d..65380f46e 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index b5c195118..1f7a1147f 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index cc15320d5..199da3745 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index b85e199fb..85d81da4a 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index d147cf86c..8f97e0623 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 188087283..71600928e 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index fb33f8ef4..d53b214fb 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 00589cca8..c54c8061a 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index 87d92009b..c172d5d26 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index dc6dabce7..049fc0e50 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 318fd1a4e..6a67d7dab 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 1d5e86e2e..7a3c95dcd 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index 3b67c6696..a54c4df7e 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 516becb23..2f979b84d 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 7b453a326..c99302c05 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index ef622ada4..7131dcc71 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 2119b5da9..7e2068335 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index 851cd1836..14ed7e4a3 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index bba135812..5e310cee8 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index 2e04cc36e..ca50908fa 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index 1b429769d..c815d0bb0 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index e6fb659f9..ab95a0798 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 4ffbfec2f..6b9bc06d7 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 4c8b37edb..3e72dc556 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index f0ffd7645..4169e9224 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 6804c888e..8c69b050d 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 9d129b81e..b6f8003cb 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 0d01789cd..3d9a385f1 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index fac9f5809..85a9b5cce 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index 188f64f92..b9f1ac6e6 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 6119c96d5..6955ebdaf 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index a02ad68db..098fa9eb3 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index c44d55545..3784f0e3f 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index bd15e88bf..e55f78c70 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index 95e062828..2a1c38f93 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 2188633dd..4c49f6fd7 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 05372c20f..0a85dfeb0 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 96e6371e4..f4b926ca4 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 10464bcf0..7c500f10f 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index f2258f9b5..8f3d10d87 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index c64e2644a..f1cb20663 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.36.11"
+version = "0.37.0"
 [plugin.config]

From 9288d3c6a61765880e547117c4286cb3f363e5f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 13:03:36 +0000
Subject: [PATCH 213/427] chore(deps): bump actions/checkout from 5 to 6

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml              | 14 +++++++-------
 .github/workflows/codeql-analysis.yml |  2 +-
 .github/workflows/docs.yml            |  2 +-
 .github/workflows/lint.yml            | 12 ++++++------
 .github/workflows/release.yml         |  6 +++---
 5 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7b5af4a3b..5c49cbe07 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
       skip: ${{ steps.check-commit.outputs.skip }}
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -53,7 +53,7 @@ jobs:
     timeout-minutes: 45
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: set up qemu
         uses: docker/setup-qemu-action@v3
@@ -87,7 +87,7 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: build-image
         uses: ./.github/actions/build-image
@@ -101,7 +101,7 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: build-image
         uses: ./.github/actions/build-image
@@ -117,7 +117,7 @@ jobs:
       matrix: ${{fromJson(needs.build.outputs.matrix)}}
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: download packages
         uses: actions/download-artifact@v6
@@ -156,7 +156,7 @@ jobs:
       fail-fast: false
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: download packages
         uses: actions/download-artifact@v6
@@ -190,7 +190,7 @@ jobs:
       GITHUB_NODE_INDEX: ${{ matrix.index }}
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: download packages
         uses: actions/download-artifact@v6
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 68c42ae64..38984b343 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # workaround for https://github.com/github/codeql/issues/14235
       - name: Remove go.work file
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index e58b3548c..35a5f7bb9 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Cloning repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 01a747d6a..4768ac828 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run hadolint
         uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5
         # v3.0.0 => 4b5806eb9c6bee4954fc0e0cc3ad6175fc9782c1
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup node
         uses: actions/setup-node@v6
         with:
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup packer
         uses: hashicorp/setup-packer@main
         with:
@@ -66,7 +66,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run shellcheck
         uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38
         # 1.1.0 => 94e0aab03ca135d11a35e5bfc14e6746dc56e7e9
@@ -76,7 +76,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run shfmt
         uses: luizm/action-sh-checker@17bd25a6ee188d2b91f677060038f4ba37ba14b2
         # v0.5.0 => edd0e45ecff35b05f162052b50df50976c1b74fc
@@ -90,7 +90,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run yamllint
         uses: ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c
         # v3.1.1 => 2576378a8e339169678f9939646ee3ee325e845c
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5f0872e67..4e59acbb2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -84,7 +84,7 @@ jobs:
     needs: release
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Setup packer
         uses: hashicorp/setup-packer@main
@@ -120,7 +120,7 @@ jobs:
     needs: release
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Bump Azure Template
         env:
           BOT_GITHUB_USERNAME: ${{ secrets.HOMEBREW_GITHUB_USERNAME }}

From d27d3ea380de326188a68bb79753d6fef1bb32bb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 13:09:38 +0000
Subject: [PATCH 214/427] chore(deps): bump traefik from 3.6.1 to 3.6.2 in
 /plugins/traefik-vhosts

Bumps traefik from 3.6.1 to 3.6.2.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index 199aa0ee8..fcb1c5032 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.6.1
+FROM traefik:3.6.2

From d923f4c73dd8b6b028c59eba736a7b3547957cea Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 13:10:13 +0000
Subject: [PATCH 215/427] chore(deps): bump github.com/go-openapi/jsonpointer

Bumps [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) from 0.22.1 to 0.22.3.
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](https://github.com/go-openapi/jsonpointer/compare/v0.22.1...v0.22.3)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 6 ++++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index a59a38828..bbc060678 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -14,7 +14,7 @@ require (
 	github.com/dokku/dokku/plugins/nginx-vhosts v0.0.0-20250618161309-8d0c35f1333c
 	github.com/fatih/color v1.18.0
 	github.com/fluxcd/pkg/kustomize v1.23.0
-	github.com/go-openapi/jsonpointer v0.22.1
+	github.com/go-openapi/jsonpointer v0.22.3
 	github.com/go-resty/resty/v2 v2.16.5
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ca0c1560d..c342c6a7a 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -115,14 +115,16 @@ github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ=
 github.com/go-logr/zapr v1.3.0/go.mod h1:YKepepNBd1u/oyhd/yQmtjVXmm9uML4IXUgMOwR8/Gg=
-github.com/go-openapi/jsonpointer v0.22.1 h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk=
-github.com/go-openapi/jsonpointer v0.22.1/go.mod h1:pQT9OsLkfz1yWoMgYFy4x3U5GY5nUlsOn1qSBH5MkCM=
+github.com/go-openapi/jsonpointer v0.22.3 h1:dKMwfV4fmt6Ah90zloTbUKWMD+0he+12XYAsPotrkn8=
+github.com/go-openapi/jsonpointer v0.22.3/go.mod h1:0lBbqeRsQ5lIanv3LHZBrmRGHLHcQoOXQnf88fHlGWo=
 github.com/go-openapi/jsonreference v0.21.2 h1:Wxjda4M/BBQllegefXrY/9aq1fxBA8sI5M/lFU6tSWU=
 github.com/go-openapi/jsonreference v0.21.2/go.mod h1:pp3PEjIsJ9CZDGCNOyXIQxsNuroxm8FAJ/+quA0yKzQ=
 github.com/go-openapi/swag v0.23.1 h1:lpsStH0n2ittzTnbaSloVZLuB5+fvSY/+hnagBjSNZU=
 github.com/go-openapi/swag v0.23.1/go.mod h1:STZs8TbRvEQQKUA+JZNAm3EWlgaOBGpyFDqQnDHMef0=
 github.com/go-openapi/swag/jsonname v0.25.1 h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU=
 github.com/go-openapi/swag/jsonname v0.25.1/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
+github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6Ub6wls=
+github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
 github.com/go-resty/resty/v2 v2.16.5 h1:hBKqmWrr7uRc3euHVqmh1HTHcKn99Smr7o5spptdhTM=

From dd4908174b46a5a45ba8fbb7356d0f00563da353 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 13:10:20 +0000
Subject: [PATCH 216/427] chore(deps): bump k8s.io/kubectl in
 /plugins/scheduler-k3s

Bumps [k8s.io/kubectl](https://github.com/kubernetes/kubectl) from 0.34.1 to 0.34.2.
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.34.1...v0.34.2)

---
updated-dependencies:
- dependency-name: k8s.io/kubectl
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 12 ++++++------
 plugins/scheduler-k3s/go.sum | 24 ++++++++++++------------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index a59a38828..b2d21c0f9 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -26,10 +26,10 @@ require (
 	golang.org/x/sync v0.18.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.0
-	k8s.io/api v0.34.1
-	k8s.io/apimachinery v0.34.1
-	k8s.io/client-go v0.34.1
-	k8s.io/kubectl v0.34.1
+	k8s.io/api v0.34.2
+	k8s.io/apimachinery v0.34.2
+	k8s.io/client-go v0.34.2
+	k8s.io/kubectl v0.34.2
 	k8s.io/kubernetes v1.34.1
 	k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d
 	mvdan.cc/sh/v3 v3.12.0
@@ -161,8 +161,8 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	k8s.io/apiextensions-apiserver v0.34.1 // indirect
 	k8s.io/apiserver v0.34.1 // indirect
-	k8s.io/cli-runtime v0.34.1 // indirect
-	k8s.io/component-base v0.34.1 // indirect
+	k8s.io/cli-runtime v0.34.2 // indirect
+	k8s.io/component-base v0.34.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ca0c1560d..8dc11972b 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -540,26 +540,26 @@ gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 helm.sh/helm/v3 v3.19.0 h1:krVyCGa8fa/wzTZgqw0DUiXuRT5BPdeqE/sQXujQ22k=
 helm.sh/helm/v3 v3.19.0/go.mod h1:Lk/SfzN0w3a3C3o+TdAKrLwJ0wcZ//t1/SDXAvfgDdc=
-k8s.io/api v0.34.1 h1:jC+153630BMdlFukegoEL8E/yT7aLyQkIVuwhmwDgJM=
-k8s.io/api v0.34.1/go.mod h1:SB80FxFtXn5/gwzCoN6QCtPD7Vbu5w2n1S0J5gFfTYk=
+k8s.io/api v0.34.2 h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY=
+k8s.io/api v0.34.2/go.mod h1:MMBPaWlED2a8w4RSeanD76f7opUoypY8TFYkSM+3XHw=
 k8s.io/apiextensions-apiserver v0.34.1 h1:NNPBva8FNAPt1iSVwIE0FsdrVriRXMsaWFMqJbII2CI=
 k8s.io/apiextensions-apiserver v0.34.1/go.mod h1:hP9Rld3zF5Ay2Of3BeEpLAToP+l4s5UlxiHfqRaRcMc=
-k8s.io/apimachinery v0.34.1 h1:dTlxFls/eikpJxmAC7MVE8oOeP1zryV7iRyIjB0gky4=
-k8s.io/apimachinery v0.34.1/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw=
+k8s.io/apimachinery v0.34.2 h1:zQ12Uk3eMHPxrsbUJgNF8bTauTVR2WgqJsTmwTE/NW4=
+k8s.io/apimachinery v0.34.2/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw=
 k8s.io/apiserver v0.34.1 h1:U3JBGdgANK3dfFcyknWde1G6X1F4bg7PXuvlqt8lITA=
 k8s.io/apiserver v0.34.1/go.mod h1:eOOc9nrVqlBI1AFCvVzsob0OxtPZUCPiUJL45JOTBG0=
-k8s.io/cli-runtime v0.34.1 h1:btlgAgTrYd4sk8vJTRG6zVtqBKt9ZMDeQZo2PIzbL7M=
-k8s.io/cli-runtime v0.34.1/go.mod h1:aVA65c+f0MZiMUPbseU/M9l1Wo2byeaGwUuQEQVVveE=
-k8s.io/client-go v0.34.1 h1:ZUPJKgXsnKwVwmKKdPfw4tB58+7/Ik3CrjOEhsiZ7mY=
-k8s.io/client-go v0.34.1/go.mod h1:kA8v0FP+tk6sZA0yKLRG67LWjqufAoSHA2xVGKw9Of8=
-k8s.io/component-base v0.34.1 h1:v7xFgG+ONhytZNFpIz5/kecwD+sUhVE6HU7qQUiRM4A=
-k8s.io/component-base v0.34.1/go.mod h1:mknCpLlTSKHzAQJJnnHVKqjxR7gBeHRv0rPXA7gdtQ0=
+k8s.io/cli-runtime v0.34.2 h1:cct1GEuWc3IyVT8MSCoIWzRGw9HJ/C5rgP32H60H6aE=
+k8s.io/cli-runtime v0.34.2/go.mod h1:X13tsrYexYUCIq8MarCBy8lrm0k0weFPTpcaNo7lms4=
+k8s.io/client-go v0.34.2 h1:Co6XiknN+uUZqiddlfAjT68184/37PS4QAzYvQvDR8M=
+k8s.io/client-go v0.34.2/go.mod h1:2VYDl1XXJsdcAxw7BenFslRQX28Dxz91U9MWKjX97fE=
+k8s.io/component-base v0.34.2 h1:HQRqK9x2sSAsd8+R4xxRirlTjowsg6fWCPwWYeSvogQ=
+k8s.io/component-base v0.34.2/go.mod h1:9xw2FHJavUHBFpiGkZoKuYZ5pdtLKe97DEByaA+hHbM=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
-k8s.io/kubectl v0.34.1 h1:1qP1oqT5Xc93K+H8J7ecpBjaz511gan89KO9Vbsh/OI=
-k8s.io/kubectl v0.34.1/go.mod h1:JRYlhJpGPyk3dEmJ+BuBiOB9/dAvnrALJEiY/C5qa6A=
+k8s.io/kubectl v0.34.2 h1:+fWGrVlDONMUmmQLDaGkQ9i91oszjjRAa94cr37hzqA=
+k8s.io/kubectl v0.34.2/go.mod h1:X2KTOdtZZNrTWmUD4oHApJ836pevSl+zvC5sI6oO2YQ=
 k8s.io/kubernetes v1.34.1 h1:F3p8dtpv+i8zQoebZeK5zBqM1g9x1aIdnA5vthvcuUk=
 k8s.io/kubernetes v1.34.1/go.mod h1:iu+FhII+Oc/1gGWLJcer6wpyih441aNFHl7Pvm8yPto=
 k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d h1:wAhiDyZ4Tdtt7e46e9M5ZSAJ/MnPGPs+Ki1gHw4w1R0=

From 2ad14f71ea38f81d4974a2ca031096f7d044cbb7 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 21 Nov 2025 19:32:55 -0500
Subject: [PATCH 217/427] docs: clarify plugin installation documentation

---
 docs/getting-started/install/docker.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 84dbdc880..6af458b0b 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -80,7 +80,7 @@ redis: https://github.com/dokku/dokku-redis.git
 
 ### Prior to Dokku start
 
-The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command. Note that the version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
+The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
 FROM dokku/dokku:0.37.0

From 6bb20e9b279567d35e2b7af86178eae6b6eeb9cb Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 21 Nov 2025 22:01:49 -0500
Subject: [PATCH 218/427] chore: remove nginx checks for functionality that
 always exists

TLS 1.3, HTTP2 and GRPC are now standard in all operating systems where Dokku is supported.
---
 plugins/nginx-vhosts/functions                | 70 ++-----------------
 .../nginx-vhosts/templates/nginx.conf.sigil   | 12 ++--
 2 files changed, 8 insertions(+), 74 deletions(-)

diff --git a/plugins/nginx-vhosts/functions b/plugins/nginx-vhosts/functions
index 1cccc2542..2d190e613 100755
--- a/plugins/nginx-vhosts/functions
+++ b/plugins/nginx-vhosts/functions
@@ -146,24 +146,6 @@ get_custom_nginx_template() {
   fi
 }
 
-is_tls13_available() {
-  declare desc="detects whether the installed nginx version has TLSv1.3 support"
-  local NGINX_VERSION="$1"
-  local MAJOR_VERSION MINOR_VERSION PATCH_VERSION
-  local HAS_SUPPORT=false
-
-  MAJOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[1]}')
-  MINOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[2]}')
-  PATCH_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[3]}')
-  if [[ "$MAJOR_VERSION" -ge "2" ]]; then
-    HAS_SUPPORT=true
-  elif [[ "$MAJOR_VERSION" -eq "1" ]] && [[ "$MINOR_VERSION" -ge "13" ]]; then
-    HAS_SUPPORT=true
-  fi
-
-  echo $HAS_SUPPORT
-}
-
 is_http2_push_enabled() {
   declare desc="detects whether the installed nginx version has http2 push support"
   local NGINX_VERSION="$1"
@@ -181,7 +163,7 @@ is_http2_push_enabled() {
     elif [[ "$MINOR_VERSION" -ge "14" ]]; then
       HAS_SUPPORT=true
     fi
-    if [[ "$MINOR_VERSION" -eq "25" ]]; then
+    if [[ "$MINOR_VERSION" -ge "25" ]]; then
       HAS_SUPPORT=false
     fi
   fi
@@ -189,28 +171,6 @@ is_http2_push_enabled() {
   echo $HAS_SUPPORT
 }
 
-is_http2_enabled() {
-  declare desc="detects whether the installed nginx version has http2 support"
-  local NGINX_VERSION="$1"
-  local MAJOR_VERSION MINOR_VERSION PATCH_VERSION
-  local HAS_SUPPORT=false
-
-  MAJOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[1]}')
-  MINOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[2]}')
-  PATCH_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[3]}')
-  if [[ "$MAJOR_VERSION" -ge "2" ]]; then
-    HAS_SUPPORT=true
-  elif [[ "$MAJOR_VERSION" -eq "1" ]]; then
-    if [[ "$MINOR_VERSION" -eq "11" ]] && [[ "$PATCH_VERSION" -ge "5" ]]; then
-      HAS_SUPPORT=true
-    elif [[ "$MINOR_VERSION" -ge "12" ]]; then
-      HAS_SUPPORT=true
-    fi
-  fi
-
-  echo $HAS_SUPPORT
-}
-
 is_http2_directive_supported() {
   declare desc="detects whether the installed nginx version has http2 directive support"
   local NGINX_VERSION="$1"
@@ -233,28 +193,6 @@ is_http2_directive_supported() {
   echo $HAS_SUPPORT
 }
 
-is_grpc_enabled() {
-  declare desc="detects whether the installed nginx version has grpc support"
-  local NGINX_VERSION="$1"
-  local MAJOR_VERSION MINOR_VERSION PATCH_VERSION
-  local HAS_SUPPORT=false
-
-  MAJOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[1]}')
-  MINOR_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[2]}')
-  PATCH_VERSION=$(echo "$NGINX_VERSION" | awk '{split($0,a,"."); print a[3]}')
-  if [[ "$MAJOR_VERSION" -ge "2" ]]; then
-    HAS_SUPPORT=true
-  elif [[ "$MAJOR_VERSION" -eq "1" ]]; then
-    if [[ "$MINOR_VERSION" -eq "13" ]] && [[ "$PATCH_VERSION" -ge "10" ]]; then
-      HAS_SUPPORT=true
-    elif [[ "$MINOR_VERSION" -ge "14" ]]; then
-      HAS_SUPPORT=true
-    fi
-  fi
-
-  echo $HAS_SUPPORT
-}
-
 nginx_build_config() {
   declare desc="build nginx config to proxy app containers using sigil"
   declare APP="$1" DOKKU_APP_LISTEN_PORT="$2" DOKKU_APP_LISTEN_IP="$3"
@@ -343,11 +281,11 @@ nginx_build_config() {
     NGINX_VERSION="$("$NGINX_LOCATION" -v 2>&1 | cut -d'/' -f 2 | awk '{print $1}')"
     # DEPRECATED: Remove me at 1.0.0
     SPDY_SUPPORTED="false"
-    TLS13_SUPPORTED="$(is_tls13_available "$NGINX_VERSION")"
-    HTTP2_SUPPORTED="$(is_http2_enabled "$NGINX_VERSION")"
+    TLS13_SUPPORTED="true"
+    HTTP2_SUPPORTED="true"
     HTTP2_DIRECTIVE_SUPPORTED="$(is_http2_directive_supported "$NGINX_VERSION")"
     HTTP2_PUSH_SUPPORTED="$(is_http2_push_enabled "$NGINX_VERSION")"
-    GRPC_SUPPORTED="$(is_grpc_enabled "$NGINX_VERSION")"
+    GRPC_SUPPORTED="true"
 
     local NGINX_LOG_ROOT="$(fn-nginx-log-root)"
     local NGINX_ACCESS_LOG_FORMAT="$(fn-nginx-computed-access-log-format "$APP")"
diff --git a/plugins/nginx-vhosts/templates/nginx.conf.sigil b/plugins/nginx-vhosts/templates/nginx.conf.sigil
index 5b5e6c052..8e2ce48f6 100644
--- a/plugins/nginx-vhosts/templates/nginx.conf.sigil
+++ b/plugins/nginx-vhosts/templates/nginx.conf.sigil
@@ -82,8 +82,8 @@ server {
   listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl;
   http2 on;
   {{ else }}
-  listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl {{ if eq $.HTTP2_SUPPORTED "true" }}http2{{ end }};
-  listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl {{ if eq $.HTTP2_SUPPORTED "true" }}http2{{ end }};
+  listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl http2;
+  listen      {{ if $.NGINX_BIND_ADDRESS_IP4 }}{{ $.NGINX_BIND_ADDRESS_IP4 }}:{{end}}{{ $listen_port }} ssl http2;
   {{ end }}
   {{ if $.SSL_SERVER_NAME }}server_name {{ $.SSL_SERVER_NAME }}; {{ end }}
   {{ if $.NOSSL_SERVER_NAME }}server_name {{ $.NOSSL_SERVER_NAME }}; {{ end }}
@@ -93,7 +93,7 @@ server {
 
   ssl_certificate           {{ $.APP_SSL_PATH }}/server.crt;
   ssl_certificate_key       {{ $.APP_SSL_PATH }}/server.key;
-  ssl_protocols             TLSv1.2 {{ if eq $.TLS13_SUPPORTED "true" }}TLSv1.3{{ end }};
+  ssl_protocols             TLSv1.2 TLSv1.3;
   ssl_prefer_server_ciphers off;
 
   {{ if $.CLIENT_BODY_TIMEOUT }}client_body_timeout {{ $.CLIENT_BODY_TIMEOUT }};{{end}}
@@ -159,7 +159,6 @@ server {
   include {{ $.DOKKU_ROOT }}/{{ $.APP }}/nginx.conf.d/*.conf;
 }
 {{ else if eq $scheme "grpc"}}
-{{ if eq $.GRPC_SUPPORTED "true"}}{{ if eq $.HTTP2_SUPPORTED "true"}}
 server {
   {{ if eq $.HTTP2_DIRECTIVE_SUPPORTED "true" }}
   listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }};
@@ -180,9 +179,7 @@ server {
   {{ if $.CLIENT_MAX_BODY_SIZE }}client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};{{ end }}
   include {{ $.DOKKU_ROOT }}/{{ $.APP }}/nginx.conf.d/*.conf;
 }
-{{ end }}{{ end }}
 {{ else if eq $scheme "grpcs"}}
-{{ if eq $.GRPC_SUPPORTED "true"}}{{ if eq $.HTTP2_SUPPORTED "true"}}
 server {
   {{ if eq $.HTTP2_DIRECTIVE_SUPPORTED "true" }}
   listen      [{{ $.NGINX_BIND_ADDRESS_IP6 }}]:{{ $listen_port }} ssl;
@@ -199,7 +196,7 @@ server {
 
   ssl_certificate           {{ $.APP_SSL_PATH }}/server.crt;
   ssl_certificate_key       {{ $.APP_SSL_PATH }}/server.key;
-  ssl_protocols             TLSv1.2 {{ if eq $.TLS13_SUPPORTED "true" }}TLSv1.3{{ end }};
+  ssl_protocols             TLSv1.2 TLSv1.3;
   ssl_prefer_server_ciphers off;
 
   location    / {
@@ -209,7 +206,6 @@ server {
   {{ if $.CLIENT_MAX_BODY_SIZE }}client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};{{ end }}
   include {{ $.DOKKU_ROOT }}/{{ $.APP }}/nginx.conf.d/*.conf;
 }
-{{ end }}{{ end }}
 {{ end }}
 {{ end }}
 

From 05bd2913dd350ff95232dd77215fdc380aab7a90 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 21 Nov 2025 22:15:48 -0500
Subject: [PATCH 219/427] chore: remove conditionals for variables that always
 have values

---
 .../nginx-vhosts/templates/nginx.conf.sigil   | 40 +++++++++----------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/plugins/nginx-vhosts/templates/nginx.conf.sigil b/plugins/nginx-vhosts/templates/nginx.conf.sigil
index 8e2ce48f6..9c200882e 100644
--- a/plugins/nginx-vhosts/templates/nginx.conf.sigil
+++ b/plugins/nginx-vhosts/templates/nginx.conf.sigil
@@ -13,11 +13,11 @@ server {
   error_log   {{ $.NGINX_ERROR_LOG_PATH }};
   underscores_in_headers {{ $.NGINX_UNDERSCORE_IN_HEADERS }};
 
-  {{ if $.CLIENT_BODY_TIMEOUT }}client_body_timeout {{ $.CLIENT_BODY_TIMEOUT }};{{end}}
-  {{ if $.CLIENT_HEADER_TIMEOUT }}client_header_timeout {{ $.CLIENT_HEADER_TIMEOUT }};{{end}}
-  {{ if $.KEEPALIVE_TIMEOUT }}keepalive_timeout {{ $.KEEPALIVE_TIMEOUT }};{{end}}
-  {{ if $.LINGERING_TIMEOUT }}lingering_timeout {{ $.LINGERING_TIMEOUT }};{{end}}
-  {{ if $.SEND_TIMEOUT }}send_timeout {{ $.SEND_TIMEOUT }};{{end}}
+  client_body_timeout {{ $.CLIENT_BODY_TIMEOUT }};
+  client_header_timeout {{ $.CLIENT_HEADER_TIMEOUT }};
+  keepalive_timeout {{ $.KEEPALIVE_TIMEOUT }};
+  lingering_timeout {{ $.LINGERING_TIMEOUT }};
+  send_timeout {{ $.SEND_TIMEOUT }};
 
 {{ if (and (eq $listen_port "80") ($.SSL_INUSE)) }}
   include {{ $.DOKKU_ROOT }}/{{ $.APP }}/nginx.conf.d/*.conf;
@@ -36,9 +36,9 @@ server {
 
     proxy_pass  http://{{ $.APP }}-{{ $upstream_port }};
     proxy_http_version 1.1;
-    {{ if $.PROXY_CONNECT_TIMEOUT }}proxy_connect_timeout {{ $.PROXY_CONNECT_TIMEOUT }};{{end}}
-    {{ if $.PROXY_READ_TIMEOUT }}proxy_read_timeout {{ $.PROXY_READ_TIMEOUT }};{{end}}
-    {{ if $.PROXY_SEND_TIMEOUT }}proxy_send_timeout {{ $.PROXY_SEND_TIMEOUT }};{{end}}
+    proxy_connect_timeout {{ $.PROXY_CONNECT_TIMEOUT }};
+    proxy_read_timeout {{ $.PROXY_READ_TIMEOUT }};
+    proxy_send_timeout {{ $.PROXY_SEND_TIMEOUT }};
     proxy_buffer_size {{ $.PROXY_BUFFER_SIZE }};
     proxy_buffering {{ $.PROXY_BUFFERING }};
     proxy_buffers {{ $.PROXY_BUFFERS }};
@@ -53,7 +53,7 @@ server {
     {{ if $.PROXY_X_FORWARDED_SSL }}proxy_set_header X-Forwarded-Ssl {{ $.PROXY_X_FORWARDED_SSL }};{{ end }}
   }
 
-  {{ if $.CLIENT_MAX_BODY_SIZE }}client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};{{ end }}
+  client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};
 
   error_page 400 401 402 403 405 406 407 408 409 410 411 412 413 414 415 416 417 418 420 422 423 424 426 428 429 431 444 449 450 451 /400-error.html;
   location /400-error.html {
@@ -96,11 +96,11 @@ server {
   ssl_protocols             TLSv1.2 TLSv1.3;
   ssl_prefer_server_ciphers off;
 
-  {{ if $.CLIENT_BODY_TIMEOUT }}client_body_timeout {{ $.CLIENT_BODY_TIMEOUT }};{{end}}
-  {{ if $.CLIENT_HEADER_TIMEOUT }}client_header_timeout {{ $.CLIENT_HEADER_TIMEOUT }};{{end}}
-  {{ if $.KEEPALIVE_TIMEOUT }}keepalive_timeout {{ $.KEEPALIVE_TIMEOUT }};{{end}}
-  {{ if $.LINGERING_TIMEOUT }}lingering_timeout {{ $.LINGERING_TIMEOUT }};{{end}}
-  {{ if $.SEND_TIMEOUT }}send_timeout {{ $.SEND_TIMEOUT }};{{end}}
+  client_body_timeout {{ $.CLIENT_BODY_TIMEOUT }};
+  client_header_timeout {{ $.CLIENT_HEADER_TIMEOUT }};
+  keepalive_timeout {{ $.KEEPALIVE_TIMEOUT }};
+  lingering_timeout {{ $.LINGERING_TIMEOUT }};
+  send_timeout {{ $.SEND_TIMEOUT }};
 
   location    / {
 
@@ -114,9 +114,9 @@ server {
     proxy_pass  http://{{ $.APP }}-{{ $upstream_port }};
     {{ if eq $.HTTP2_PUSH_SUPPORTED "true" }}http2_push_preload on; {{ end }}
     proxy_http_version 1.1;
-    {{ if $.PROXY_CONNECT_TIMEOUT }}proxy_connect_timeout {{ $.PROXY_CONNECT_TIMEOUT }};{{end}}
-    {{ if $.PROXY_READ_TIMEOUT }}proxy_read_timeout {{ $.PROXY_READ_TIMEOUT }};{{end}}
-    {{ if $.PROXY_SEND_TIMEOUT }}proxy_send_timeout {{ $.PROXY_SEND_TIMEOUT }};{{end}}
+    proxy_connect_timeout {{ $.PROXY_CONNECT_TIMEOUT }};
+    proxy_read_timeout {{ $.PROXY_READ_TIMEOUT }};
+    proxy_send_timeout {{ $.PROXY_SEND_TIMEOUT }};
     proxy_buffer_size {{ $.PROXY_BUFFER_SIZE }};
     proxy_buffering {{ $.PROXY_BUFFERING }};
     proxy_buffers {{ $.PROXY_BUFFERS }};
@@ -131,7 +131,7 @@ server {
     {{ if $.PROXY_X_FORWARDED_SSL }}proxy_set_header X-Forwarded-Ssl {{ $.PROXY_X_FORWARDED_SSL }};{{ end }}
   }
 
-  {{ if $.CLIENT_MAX_BODY_SIZE }}client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};{{ end }}
+  client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};
 
   error_page 400 401 402 403 405 406 407 408 409 410 411 412 413 414 415 416 417 418 420 422 423 424 426 428 429 431 444 449 450 451 /400-error.html;
   location /400-error.html {
@@ -176,7 +176,7 @@ server {
     grpc_pass  grpc://{{ $.APP }}-{{ $upstream_port }};
   }
 
-  {{ if $.CLIENT_MAX_BODY_SIZE }}client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};{{ end }}
+  client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};
   include {{ $.DOKKU_ROOT }}/{{ $.APP }}/nginx.conf.d/*.conf;
 }
 {{ else if eq $scheme "grpcs"}}
@@ -203,7 +203,7 @@ server {
     grpc_pass  grpc://{{ $.APP }}-{{ $upstream_port }};
   }
 
-  {{ if $.CLIENT_MAX_BODY_SIZE }}client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};{{ end }}
+  client_max_body_size {{ $.CLIENT_MAX_BODY_SIZE }};
   include {{ $.DOKKU_ROOT }}/{{ $.APP }}/nginx.conf.d/*.conf;
 }
 {{ end }}

From 81a76207b52ccf38f924d9858acfb4b606d12b6a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 18:37:02 -0500
Subject: [PATCH 220/427] docs: clarify system requirements for k3s usage

Closes #7573
---
 docs/getting-started/installation/index.md | 16 +++++-----------
 1 file changed, 5 insertions(+), 11 deletions(-)

diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 41239619b..634499761 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -8,17 +8,11 @@ Dokku is an extensible, open source Platform as a Service that runs on a single
 
 To start using Dokku, you'll need a system that meets the following minimum requirements:
 
-- A fresh installation of any of the following operating systems:
-    - [Ubuntu 22.04/24.04](https://www.ubuntu.com/download)
-    - [Debian 11+ x64](https://www.debian.org/distrib/)
-- A server with one of the following architectures
-    - AMD64 (alternatively known as `x86_64`), commonly used for Intel cloud servers
-    - ARMV8 (alternatively known as `arm64`), commonly used for Raspberry PI and AWS Graviton
-
-To avoid memory pressure during builds or runtime of your applications, we suggest the following:
-
-- At least 1 GB of system memory
-    - If your system has less than 1GB of memory, you can use [this workaround](/docs/getting-started/advanced-installation.md#vms-with-less-than-1-gb-of-memory).
+- Operating Systems: [Ubuntu 22.04/24.04](https://www.ubuntu.com/download) or [Debian 11+ x64](https://www.debian.org/distrib/)
+- Supported Architectures: `AMD64` (`x86_64`) and `arm64` (`armv8`)
+- Minimum Memory:
+    - Docker Scheduler: 1GB of system memory, or [add swap memory](/docs/getting-started/advanced-installation.md#vms-with-less-than-1-gb-of-memory)
+    - K3s Scheduler: 2GB of system memory on every node in the cluster
 
 Finally, we recommend attaching at least one domain name to your server. This is not required, but using a domain name will make app access easier. When connecting a domain, either a single domain or a wildcard may be associated to the server's IP.
 

From 0c96c4b6de1eeafb2004b0def04944f1143b0853 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 19:39:56 -0500
Subject: [PATCH 221/427] feat: allow exposing non-web processes as kubernetes
 services

Closes #7204
---
 docs/appendices/file-formats/app-json.md      | 19 +++++
 docs/deployment/schedulers/k3s.md             | 21 ++++++
 plugins/app-json/appjson.go                   | 10 +++
 .../templates/chart/deployment.yaml           |  4 ++
 plugins/scheduler-k3s/triggers.go             | 16 +++++
 tests/unit/scheduler-k3s-4.bats               | 70 +++++++++++++++++++
 6 files changed, 140 insertions(+)
 create mode 100644 tests/unit/scheduler-k3s-4.bats

diff --git a/docs/appendices/file-formats/app-json.md b/docs/appendices/file-formats/app-json.md
index b3cd72c7b..53924fabc 100644
--- a/docs/appendices/file-formats/app-json.md
+++ b/docs/appendices/file-formats/app-json.md
@@ -43,6 +43,7 @@
 - `autoscaling` (map of string to object, optional) autoscaling rules. See the autoscaling section for more details
 - `max_parallel`: (int, optional) number of instances to deploy in parallel at a given time
 - `quantity`: (int, optional) number of processes to maintain. Default 1 for web processes, 0 for all others.
+- `service`: (map of string to oject, optional) governs how non-web processes are exposed as services on the network
 
 ### Autoscaling
 
@@ -82,6 +83,24 @@ An autoscaling trigger consists of the following properties:
 - `type`: (string, optional)
 - `metadata`: (object, optional)
 
+### Service
+
+```json
+{
+  "formation": {  
+    "internal-web": {
+      "service": {
+        "exposed": true
+      }
+    }
+  }
+}
+```
+
+(object, optional) A key-value object specifying how to expose non-web processes as services.
+
+- `service`: (boolean, optional) Whether to expose a process as a network service. The `PORT` variable will be set to 5000.
+
 ## Healthchecks
 
 ```json
diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index 2b23186ee..6a51e6510 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -232,6 +232,27 @@ The global default value may be set by passing an empty value for the option.
 dokku scheduler-k3s:set --global deploy-timeout
 ```
 
+### Exposing services on the network
+
+Dokku will automatically expose the `web` process as a Kubernetes Service, with all others being treated as background processes. In some cases, it may be useful to have other processes exposed as Kubernetes Service objects so as to segregate internal http endpoints from public http endpoints. This can be done by modifying the `app.json` Formation entry for your process type.
+
+```json
+{
+  "formation": {  
+    "internal-web": {
+      "service": {
+        "exposed": true
+      }
+    }
+  }
+}
+```
+
+In the above example, the `internal-web` process is exposed as a service. The `PORT` variable for the process will be set to `5000`, and a kubernetes `Service` object will be created pointing at your processes.
+
+> [!NOTE]
+> It is not possible to modify the port mapping, nor is it possible to assign domains or SSL to a non-web process.
+
 ### SSL Certificates
 
 #### Enabling letsencrypt integration
diff --git a/plugins/app-json/appjson.go b/plugins/app-json/appjson.go
index c071dc908..3133330c1 100644
--- a/plugins/app-json/appjson.go
+++ b/plugins/app-json/appjson.go
@@ -76,6 +76,16 @@ type Formation struct {
 
 	// MaxParallel is the maximum number of processes to start in parallel
 	MaxParallel *int `json:"max_parallel"`
+
+	// Service is a struct that represents how to expose the process to the network
+	// This only applies to non-web processes
+	Service *FormationService `json:"service"`
+}
+
+// FormationService is a struct that represents how to expose a process to the network
+type FormationService struct {
+	// Exposed is whether or not the process is exposed as a service
+	Exposed bool `json:"exposed"`
 }
 
 // FormationAutoscaling is a struct that represents the autoscaling configuration for a process from an app.json file
diff --git a/plugins/scheduler-k3s/templates/chart/deployment.yaml b/plugins/scheduler-k3s/templates/chart/deployment.yaml
index 10455a329..f87e639b0 100644
--- a/plugins/scheduler-k3s/templates/chart/deployment.yaml
+++ b/plugins/scheduler-k3s/templates/chart/deployment.yaml
@@ -64,7 +64,11 @@ spec:
         {{- if hasKey $config "web" }}
         env:
         - name: PORT
+          {{- if eq $processName "web" }}
           value: "{{ $.Values.global.network.primary_port }}"
+          {{- else }}
+          value: "5000"
+          {{- end }}
         {{- end }}
         envFrom:
         - secretRef:
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 1c12808ba..4ca9e52dc 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -623,6 +623,22 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 			}
 
 			sort.Sort(NameSorter(processValues.Web.PortMaps))
+		} else if appJSON.Formation[processType].Service != nil && appJSON.Formation[processType].Service.Exposed {
+			processValues.Web = ProcessWeb{
+				Domains:  []ProcessDomains{},
+				PortMaps: []ProcessPortMap{},
+				TLS: ProcessTls{
+					Enabled: false,
+				},
+			}
+
+			processValues.Web.PortMaps = append(processValues.Web.PortMaps, ProcessPortMap{
+				ContainerPort: 5000,
+				HostPort:      5000,
+				Name:          "http-5000-5000",
+				Protocol:      PortmapProtocol_TCP,
+				Scheme:        "http",
+			})
 		}
 
 		values.Processes[processType] = processValues
diff --git a/tests/unit/scheduler-k3s-4.bats b/tests/unit/scheduler-k3s-4.bats
new file mode 100644
index 000000000..193ec1736
--- /dev/null
+++ b/tests/unit/scheduler-k3s-4.bats
@@ -0,0 +1,70 @@
+#!/usr/bin/env bats
+
+load test_helper
+
+TEST_APP="rdmtestapp"
+
+setup() {
+  uninstall_k3s || true
+  global_setup
+  dokku nginx:stop
+  export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
+}
+
+teardown() {
+  global_teardown
+  dokku nginx:start
+  uninstall_k3s || true
+}
+
+@test "(scheduler-k3s) app.json defined service" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:scale $TEST_APP web=1 worker=1"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_app_json
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get services $TEST_APP-web -o json | jq -r '.spec.ports[0].port'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "80"
+
+  run /bin/bash -c "kubectl get services $TEST_APP-web -o json | jq -r '.spec.ports[0].targetPort'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "5000"
+}
+
+inject_app_json() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+  cat <<EOF >"$APP_REPO_DIR/app.json"
+{
+  "formation": {
+    "worker": {
+      "service": {
+        "exposed": true
+      }
+    }
+  }
+}
+EOF
+}

From 4dce4d652a937ddbb2fb39f68764962dd46c39b4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 19:51:29 -0500
Subject: [PATCH 222/427] fix: ensure keda usage does not cause jank in scaling
 deployments

If the values set by keda do not match the current deployment replicas value, the deployment object may be scaled in unexpected ways during a helm release. This change ensures keda will continue to manage that value correctly without the deployment object setting it back to something else.
---
 plugins/scheduler-k3s/templates/chart/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/plugins/scheduler-k3s/templates/chart/deployment.yaml b/plugins/scheduler-k3s/templates/chart/deployment.yaml
index 10455a329..444dfaf0d 100644
--- a/plugins/scheduler-k3s/templates/chart/deployment.yaml
+++ b/plugins/scheduler-k3s/templates/chart/deployment.yaml
@@ -30,7 +30,9 @@ metadata:
   name: {{ $.Values.global.app_name }}-{{ $processName }}
   namespace: {{ $.Values.global.namespace }}
 spec:
+  {{- if not (and $config.autoscaling (and $config.autoscaling.enabled (eq $config.autoscaling.type "keda"))) }}
   replicas: {{ $config.replicas }}
+  {{- end }}
   revisionHistoryLimit: 5
   selector:
     matchLabels:

From 3a44cc627070d4dfd84ba82f6cdf2ce2e2bcfb63 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 20:08:14 -0500
Subject: [PATCH 223/427] docs: fix reference to letsencrypt-server property

---
 docs/deployment/schedulers/k3s.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index 2b23186ee..78f0bc745 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -262,7 +262,7 @@ The default value may be set by passing an empty value for the option:
 dokku scheduler-k3s:set node-js-app letsencrypt-server
 ```
 
-The `image-pull-secrets` property can also be set globally. The global default is `production`.
+The `letsencrypt-server` property can also be set globally. The global default is `production`.
 
 ```shell
 dokku scheduler-k3s:set --global letsencrypt-server staging

From 247d522b7ee379e19bce92d80785999db5d99b79 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 20:25:22 -0500
Subject: [PATCH 224/427] feat: enable live-restore by default when installing
 Dokku

This will help users have more seamless upgrades in the future in cases where docker is restarted.
---
 debian/control  |  4 ++--
 debian/postinst | 34 ++++++++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+), 2 deletions(-)

diff --git a/debian/control b/debian/control
index 9fa5ff11d..82b6eeaa4 100644
--- a/debian/control
+++ b/debian/control
@@ -3,9 +3,9 @@ Version: 0.37.0
 Section: web
 Priority: optional
 Architecture: amd64
-Depends: apache2-utils, locales, git, cpio, cron, curl, man-db, netcat, sshcommand, docker-engine-cs (>= 19.03.0) | docker-engine (>= 19.03.0) | docker-io (>= 19.03.0) | docker.io (>= 19.03.0) | docker-ce (>= 19.03.0) | docker-ee (>= 19.03.0) | moby-engine, docker-compose-plugin | moby-compose, docker-buildx-plugin | moby-buildx, docker-container-healthchecker, docker-image-labeler, lambda-builder, net-tools, netrc, parallel, procfile-util, rsync, dos2unix, jq, unzip, util-linux
+Depends: apache2-utils, locales, git, cpio, cron, curl, man-db, netcat, sshcommand, docker-engine-cs (>= 19.03.0) | docker-engine (>= 19.03.0) | docker-io (>= 19.03.0) | docker.io (>= 19.03.0) | docker-ce (>= 19.03.0) | docker-ee (>= 19.03.0) | moby-engine, docker-compose-plugin | moby-compose, docker-buildx-plugin | moby-buildx, docker-container-healthchecker, docker-image-labeler, lambda-builder, net-tools, netrc, parallel, procfile-util, rsync, dos2unix, unzip, util-linux
 Recommends: herokuish, bash-completion, dokku-update, dokku-event-listener
-Pre-Depends: gliderlabs-sigil, nginx (>= 1.8.0) | openresty, bind9-dnsutils, debconf, plugn, sudo, python3, rsyslog
+Pre-Depends: gliderlabs-sigil, jq, nginx (>= 1.8.0) | openresty, bind9-dnsutils, debconf, plugn, sudo, python3, rsyslog
 Maintainer: Jose Diaz-Gonzalez <dokku@josediazgonzalez.com>
 Description: Docker-powered PaaS that helps build and manage the lifecycle of applications
  Dokku is an extensible, open source Platform as a Service
diff --git a/debian/postinst b/debian/postinst
index 6e6976f08..3abf72ddb 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -24,6 +24,39 @@ call-sshcommand() {
   fi
 }
 
+setup-docker-live-restore() {
+  # skip if running in docker-based installation
+  if [[ "$DOKKU_INIT_SYSTEM" == "sv" ]]; then
+    return
+  fi
+
+  # allow disabling via /etc/default/dokku
+  if [[ "$DOKKU_LIVE_RESTORE" == "false" ]]; then
+    return
+  fi
+
+  live_restore="$(docker info --format '{{ .LiveRestoreEnabled }}' || true)"
+  if [ "$live_restore" = "true" ]; then
+    echo "Docker live-restore is already enabled"
+    return
+  fi
+
+  echo "Enabling docker live-restore"
+  if [[ ! -f /etc/docker/daemon.json ]]; then
+    echo "{}" >/etc/docker/daemon.json
+  fi
+
+  config="$(jq '. + {"live-restore": true}' /etc/docker/daemon.json)"
+  echo "$config" >/etc/docker/daemon.json
+  if command -v systemctl &>/dev/null; then
+    if ! systemctl reload docker; then
+      echo "Unable to reload docker, please reload manually" 1>&2
+    fi
+  else
+    echo "Unable to reload docker, please reload manually" 1>&2
+  fi
+}
+
 setup-user() {
   echo "Setting up dokku user"
   call-sshcommand create dokku /usr/bin/dokku
@@ -135,6 +168,7 @@ case "$1" in
     dpkg-handling
     setup-plugins
     setup-sshcommand
+    setup-docker-live-restore
     ;;
 
   *)

From f4e2c32721c04294ddcbbdabb9c645e5595aa97e Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 21:57:53 -0500
Subject: [PATCH 225/427] feat: sanitize vector sink values in report output

It is not sanitized in json format output as that is used for automation, but this should remove the need to redact any potentially sensitive information that users have in the sink, such as a token.

Closes #8147
---
 plugins/logs/report.go | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/plugins/logs/report.go b/plugins/logs/report.go
index 781ea486f..d815615b3 100644
--- a/plugins/logs/report.go
+++ b/plugins/logs/report.go
@@ -1,6 +1,9 @@
 package logs
 
 import (
+	"fmt"
+	"os"
+
 	"github.com/dokku/dokku/plugins/common"
 )
 
@@ -10,6 +13,7 @@ func ReportSingleApp(appName string, format string, infoFlag string) error {
 		return err
 	}
 
+	os.Setenv("DOKKU_REPORT_FORMAT", format)
 	flags := map[string]common.ReportFunc{
 		"--logs-computed-app-label-alias": reportComputedAppLabelAlias,
 		"--logs-computed-max-size":        reportComputedMaxSize,
@@ -68,7 +72,18 @@ func reportVectorGlobalImage(appName string) string {
 }
 
 func reportGlobalVectorSink(appName string) string {
-	return common.PropertyGet("logs", "--global", "vector-sink")
+	value := common.PropertyGet("logs", "--global", "vector-sink")
+	// only show the schema and sanitize the rest
+	if value != "" && os.Getenv("DOKKU_REPORT_FORMAT") == "stdout" {
+		sink, err := SinkValueToConfig("--global", value)
+		if err != nil {
+			return ""
+		}
+
+		return fmt.Sprintf("%s://redacted", sink["type"])
+	}
+
+	return ""
 }
 
 func reportMaxSize(appName string) string {
@@ -76,5 +91,15 @@ func reportMaxSize(appName string) string {
 }
 
 func reportVectorSink(appName string) string {
-	return common.PropertyGet("logs", appName, "vector-sink")
+	value := common.PropertyGet("logs", appName, "vector-sink")
+	if value != "" && os.Getenv("DOKKU_REPORT_FORMAT") == "stdout" {
+		sink, err := SinkValueToConfig(appName, value)
+		if err != nil {
+			return ""
+		}
+
+		return fmt.Sprintf("%s://redacted", sink["type"])
+	}
+
+	return ""
 }

From a4a229df3a822239429c93da3201d3fe7f0906ce Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 22 Nov 2025 22:06:28 -0500
Subject: [PATCH 226/427] fix: do not start nginx if there are no apps with
 nginx as a proxy

Also start it by default in the case where there are no apps at all, as that likely means this is a first-time installation.
---
 plugins/nginx-vhosts/install | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

diff --git a/plugins/nginx-vhosts/install b/plugins/nginx-vhosts/install
index c8bcb3a7a..748dec90e 100755
--- a/plugins/nginx-vhosts/install
+++ b/plugins/nginx-vhosts/install
@@ -156,9 +156,31 @@ trigger-nginx-vhosts-install() {
   # avoid failing runit init calls on install
   # the runit binaries are not yet available during dockerfile building
   # and therefore both these calls will fail
-  if [[ ! -x /usr/bin/sv ]] && [[ "$(fn-plugin-property-get "nginx" "--global" "proxy-status")" != "stopped" ]]; then
-    fn-nginx-vhosts-nginx-init-cmd start || fn-nginx-vhosts-nginx-init-cmd reload
+  if [[ -x /usr/bin/sv ]]; then
+    return
   fi
+
+  # avoid starting nginx if it was stopped via the nginx:stop command
+  if [[ "$(fn-plugin-property-get "nginx" "--global" "proxy-status")" == "stopped" ]]; then
+    return
+  fi
+
+  # only start nginx if there is an app with the nginx proxy type
+  local start_nginx=false
+  local has_apps=false
+  for app in $(dokku_apps "false" 2>/dev/null); do
+    has_apps=true
+    if [[ "$(plugn trigger proxy-type "$app")" == "nginx" ]]; then
+      start_nginx=true
+      break
+    fi
+  done
+
+  if [[ "$start_nginx" == "false" ]] && [[ "$has_apps" == "true" ]]; then
+    return
+  fi
+
+  fn-nginx-vhosts-nginx-init-cmd start || fn-nginx-vhosts-nginx-init-cmd reload
 }
 
 trigger-nginx-vhosts-install "$@"

From e60ebf12fa9fbe3479dc121fb7ed0dbf84d86355 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 23 Nov 2025 00:11:05 -0500
Subject: [PATCH 227/427] fix: do not sanitize if the value was the one
 requested

---
 plugins/logs/report.go | 52 ++++++++++++++++++++++++++++--------------
 1 file changed, 35 insertions(+), 17 deletions(-)

diff --git a/plugins/logs/report.go b/plugins/logs/report.go
index d815615b3..a18402473 100644
--- a/plugins/logs/report.go
+++ b/plugins/logs/report.go
@@ -14,6 +14,7 @@ func ReportSingleApp(appName string, format string, infoFlag string) error {
 	}
 
 	os.Setenv("DOKKU_REPORT_FORMAT", format)
+	os.Setenv("DOKKU_REPORT_FLAG", infoFlag)
 	flags := map[string]common.ReportFunc{
 		"--logs-computed-app-label-alias": reportComputedAppLabelAlias,
 		"--logs-computed-max-size":        reportComputedMaxSize,
@@ -73,17 +74,25 @@ func reportVectorGlobalImage(appName string) string {
 
 func reportGlobalVectorSink(appName string) string {
 	value := common.PropertyGet("logs", "--global", "vector-sink")
-	// only show the schema and sanitize the rest
-	if value != "" && os.Getenv("DOKKU_REPORT_FORMAT") == "stdout" {
-		sink, err := SinkValueToConfig("--global", value)
-		if err != nil {
-			return ""
-		}
-
-		return fmt.Sprintf("%s://redacted", sink["type"])
+	if value == "" {
+		return value
 	}
 
-	return ""
+	if os.Getenv("DOKKU_REPORT_FORMAT") != "stdout" {
+		return value
+	}
+
+	if os.Getenv("DOKKU_REPORT_FLAG") == "--logs-global-vector-sink" {
+		return value
+	}
+
+	// only show the schema and sanitize the rest
+	sink, err := SinkValueToConfig("--global", value)
+	if err != nil {
+		return ""
+	}
+
+	return fmt.Sprintf("%s://redacted", sink["type"])
 }
 
 func reportMaxSize(appName string) string {
@@ -92,14 +101,23 @@ func reportMaxSize(appName string) string {
 
 func reportVectorSink(appName string) string {
 	value := common.PropertyGet("logs", appName, "vector-sink")
-	if value != "" && os.Getenv("DOKKU_REPORT_FORMAT") == "stdout" {
-		sink, err := SinkValueToConfig(appName, value)
-		if err != nil {
-			return ""
-		}
-
-		return fmt.Sprintf("%s://redacted", sink["type"])
+	if value == "" {
+		return value
 	}
 
-	return ""
+	if os.Getenv("DOKKU_REPORT_FORMAT") != "stdout" {
+		return value
+	}
+
+	if os.Getenv("DOKKU_REPORT_FLAG") == "--logs-vector-sink" {
+		return value
+	}
+
+	// only show the schema and sanitize the rest
+	sink, err := SinkValueToConfig(appName, value)
+	if err != nil {
+		return ""
+	}
+
+	return fmt.Sprintf("%s://redacted", sink["type"])
 }

From d7a9bf0a4d65cea31b2ecda04a378078003d92da Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Nov 2025 14:27:36 +0000
Subject: [PATCH 228/427] chore(deps): bump k8s.io/kubernetes in
 /plugins/scheduler-k3s

Bumps [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) from 1.34.1 to 1.34.2.
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](https://github.com/kubernetes/kubernetes/compare/v1.34.1...v1.34.2)

---
updated-dependencies:
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 56a243db3..279db410f 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -30,7 +30,7 @@ require (
 	k8s.io/apimachinery v0.34.2
 	k8s.io/client-go v0.34.2
 	k8s.io/kubectl v0.34.2
-	k8s.io/kubernetes v1.34.1
+	k8s.io/kubernetes v1.34.2
 	k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d
 	mvdan.cc/sh/v3 v3.12.0
 	sigs.k8s.io/kustomize/api v0.21.0
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2266bed5c..06c83eeab 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -562,8 +562,8 @@ k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZ
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
 k8s.io/kubectl v0.34.2 h1:+fWGrVlDONMUmmQLDaGkQ9i91oszjjRAa94cr37hzqA=
 k8s.io/kubectl v0.34.2/go.mod h1:X2KTOdtZZNrTWmUD4oHApJ836pevSl+zvC5sI6oO2YQ=
-k8s.io/kubernetes v1.34.1 h1:F3p8dtpv+i8zQoebZeK5zBqM1g9x1aIdnA5vthvcuUk=
-k8s.io/kubernetes v1.34.1/go.mod h1:iu+FhII+Oc/1gGWLJcer6wpyih441aNFHl7Pvm8yPto=
+k8s.io/kubernetes v1.34.2 h1:WQdDvYJazkmkwSncgNwGvVtaCt4TYXIU3wSMRgvp3MI=
+k8s.io/kubernetes v1.34.2/go.mod h1:m6pZk6a179pRo2wsTiCPORJ86iOEQmfIzUvtyEF8BwA=
 k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d h1:wAhiDyZ4Tdtt7e46e9M5ZSAJ/MnPGPs+Ki1gHw4w1R0=
 k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 h1:yCiThjArNgVjRbyBGvRvYr/B6G3djvr5pXrh8MXfnsk=

From cd5c0777876129e4cee85852eee8d2903e6d3ab3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Nov 2025 14:27:44 +0000
Subject: [PATCH 229/427] chore(deps): bump helm.sh/helm/v3 in
 /plugins/scheduler-k3s

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.19.0 to 3.19.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.19.0...v3.19.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 4 ++--
 plugins/scheduler-k3s/go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 56a243db3..8419d509f 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -25,7 +25,7 @@ require (
 	github.com/traefik/traefik/v2 v2.11.30
 	golang.org/x/sync v0.18.0
 	gopkg.in/yaml.v3 v3.0.1
-	helm.sh/helm/v3 v3.19.0
+	helm.sh/helm/v3 v3.19.2
 	k8s.io/api v0.34.2
 	k8s.io/apimachinery v0.34.2
 	k8s.io/client-go v0.34.2
@@ -55,7 +55,7 @@ require (
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v1.0.0-rc.1 // indirect
-	github.com/cyphar/filepath-securejoin v0.4.1 // indirect
+	github.com/cyphar/filepath-securejoin v0.6.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/docker/docker-credential-helpers v0.9.3 // indirect
 	github.com/emicklei/go-restful/v3 v3.13.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2266bed5c..0f0298bfa 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -55,8 +55,8 @@ github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSV
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
 github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
-github.com/cyphar/filepath-securejoin v0.4.1 h1:JyxxyPEaktOD+GAnqIqTf9A8tHyAG22rowi7HkoSU1s=
-github.com/cyphar/filepath-securejoin v0.4.1/go.mod h1:Sdj7gXlvMcPZsbhwhQ33GguGLDGQL7h7bg04C/+u9jI=
+github.com/cyphar/filepath-securejoin v0.6.0 h1:BtGB77njd6SVO6VztOHfPxKitJvd/VPT+OFBFMOi1Is=
+github.com/cyphar/filepath-securejoin v0.6.0/go.mod h1:A8hd4EnAeyujCJRrICiOWqjS1AX0a9kM5XL+NwKoYSc=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
@@ -540,8 +540,8 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-helm.sh/helm/v3 v3.19.0 h1:krVyCGa8fa/wzTZgqw0DUiXuRT5BPdeqE/sQXujQ22k=
-helm.sh/helm/v3 v3.19.0/go.mod h1:Lk/SfzN0w3a3C3o+TdAKrLwJ0wcZ//t1/SDXAvfgDdc=
+helm.sh/helm/v3 v3.19.2 h1:psQjaM8aIWrSVEly6PgYtLu/y6MRSmok4ERiGhZmtUY=
+helm.sh/helm/v3 v3.19.2/go.mod h1:gX10tB5ErM+8fr7bglUUS/UfTOO8UUTYWIBH1IYNnpE=
 k8s.io/api v0.34.2 h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY=
 k8s.io/api v0.34.2/go.mod h1:MMBPaWlED2a8w4RSeanD76f7opUoypY8TFYkSM+3XHw=
 k8s.io/apiextensions-apiserver v0.34.1 h1:NNPBva8FNAPt1iSVwIE0FsdrVriRXMsaWFMqJbII2CI=

From d2719a27512a8d6e2c292b35ff2e1f4c90d190a1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 25 Nov 2025 13:10:18 +0000
Subject: [PATCH 230/427] chore(deps): bump github.com/fluxcd/pkg/kustomize

Bumps [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) from 1.23.0 to 1.24.0.
- [Commits](https://github.com/fluxcd/pkg/compare/apis/meta/v1.23.0...kustomize/v1.24.0)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod |  8 ++++----
 plugins/scheduler-k3s/go.sum | 16 ++++++++--------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 58dfb7af7..182de5080 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -13,7 +13,7 @@ require (
 	github.com/dokku/dokku/plugins/logs v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/nginx-vhosts v0.0.0-20250618161309-8d0c35f1333c
 	github.com/fatih/color v1.18.0
-	github.com/fluxcd/pkg/kustomize v1.23.0
+	github.com/fluxcd/pkg/kustomize v1.24.0
 	github.com/go-openapi/jsonpointer v0.22.3
 	github.com/go-resty/resty/v2 v2.16.5
 	github.com/gofrs/flock v0.13.0
@@ -159,15 +159,15 @@ require (
 	google.golang.org/protobuf v1.36.9 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	k8s.io/apiextensions-apiserver v0.34.1 // indirect
-	k8s.io/apiserver v0.34.1 // indirect
+	k8s.io/apiextensions-apiserver v0.34.2 // indirect
+	k8s.io/apiserver v0.34.2 // indirect
 	k8s.io/cli-runtime v0.34.2 // indirect
 	k8s.io/component-base v0.34.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 // indirect
 	oras.land/oras-go/v2 v2.6.0 // indirect
-	sigs.k8s.io/controller-runtime v0.22.3 // indirect
+	sigs.k8s.io/controller-runtime v0.22.4 // indirect
 	sigs.k8s.io/gateway-api v1.4.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/kustomize/kyaml v0.21.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index c8c9d71bc..9857418df 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -91,8 +91,8 @@ github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
 github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
 github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
-github.com/fluxcd/pkg/kustomize v1.23.0 h1:4tNh30OsIj96YRfVP7qP0Fv3QTwdBo/udfZIcccL6NI=
-github.com/fluxcd/pkg/kustomize v1.23.0/go.mod h1:ZojUvmI4RiHk3BH3L3mBQ4ZDbNkiWfX9LvOMBjKq5Tc=
+github.com/fluxcd/pkg/kustomize v1.24.0 h1:ckFB7hh9FpJA1Oy3bYl88p9On/zsZZTbwlLBgP6eUkA=
+github.com/fluxcd/pkg/kustomize v1.24.0/go.mod h1:cydG0vKpDuUaoP5STpKfxY3zqgzaARv5HsWDOFyt5nA=
 github.com/foxcpp/go-mockdns v1.1.0 h1:jI0rD8M0wuYAxL7r/ynTrCQQq0BVqfB99Vgk7DlmewI=
 github.com/foxcpp/go-mockdns v1.1.0/go.mod h1:IhLeSFGed3mJIAXPH2aiRQB+kqz7oqu8ld2qVbOu7Wk=
 github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
@@ -544,12 +544,12 @@ helm.sh/helm/v3 v3.19.2 h1:psQjaM8aIWrSVEly6PgYtLu/y6MRSmok4ERiGhZmtUY=
 helm.sh/helm/v3 v3.19.2/go.mod h1:gX10tB5ErM+8fr7bglUUS/UfTOO8UUTYWIBH1IYNnpE=
 k8s.io/api v0.34.2 h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY=
 k8s.io/api v0.34.2/go.mod h1:MMBPaWlED2a8w4RSeanD76f7opUoypY8TFYkSM+3XHw=
-k8s.io/apiextensions-apiserver v0.34.1 h1:NNPBva8FNAPt1iSVwIE0FsdrVriRXMsaWFMqJbII2CI=
-k8s.io/apiextensions-apiserver v0.34.1/go.mod h1:hP9Rld3zF5Ay2Of3BeEpLAToP+l4s5UlxiHfqRaRcMc=
+k8s.io/apiextensions-apiserver v0.34.2 h1:WStKftnGeoKP4AZRz/BaAAEJvYp4mlZGN0UCv+uvsqo=
+k8s.io/apiextensions-apiserver v0.34.2/go.mod h1:398CJrsgXF1wytdaanynDpJ67zG4Xq7yj91GrmYN2SE=
 k8s.io/apimachinery v0.34.2 h1:zQ12Uk3eMHPxrsbUJgNF8bTauTVR2WgqJsTmwTE/NW4=
 k8s.io/apimachinery v0.34.2/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw=
-k8s.io/apiserver v0.34.1 h1:U3JBGdgANK3dfFcyknWde1G6X1F4bg7PXuvlqt8lITA=
-k8s.io/apiserver v0.34.1/go.mod h1:eOOc9nrVqlBI1AFCvVzsob0OxtPZUCPiUJL45JOTBG0=
+k8s.io/apiserver v0.34.2 h1:2/yu8suwkmES7IzwlehAovo8dDE07cFRC7KMDb1+MAE=
+k8s.io/apiserver v0.34.2/go.mod h1:gqJQy2yDOB50R3JUReHSFr+cwJnL8G1dzTA0YLEqAPI=
 k8s.io/cli-runtime v0.34.2 h1:cct1GEuWc3IyVT8MSCoIWzRGw9HJ/C5rgP32H60H6aE=
 k8s.io/cli-runtime v0.34.2/go.mod h1:X13tsrYexYUCIq8MarCBy8lrm0k0weFPTpcaNo7lms4=
 k8s.io/client-go v0.34.2 h1:Co6XiknN+uUZqiddlfAjT68184/37PS4QAzYvQvDR8M=
@@ -572,8 +572,8 @@ mvdan.cc/sh/v3 v3.12.0 h1:ejKUR7ONP5bb+UGHGEG/k9V5+pRVIyD+LsZz7o8KHrI=
 mvdan.cc/sh/v3 v3.12.0/go.mod h1:Se6Cj17eYSn+sNooLZiEUnNNmNxg0imoYlTu4CyaGyg=
 oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc=
 oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o=
-sigs.k8s.io/controller-runtime v0.22.3 h1:I7mfqz/a/WdmDCEnXmSPm8/b/yRTy6JsKKENTijTq8Y=
-sigs.k8s.io/controller-runtime v0.22.3/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8=
+sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A=
+sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8=
 sigs.k8s.io/gateway-api v1.4.0 h1:ZwlNM6zOHq0h3WUX2gfByPs2yAEsy/EenYJB78jpQfQ=
 sigs.k8s.io/gateway-api v1.4.0/go.mod h1:AR5RSqciWP98OPckEjOjh2XJhAe2Na4LHyXD2FUY7Qk=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=

From 95e99070c6c11448ac2cbf9200ebc2348c3be0aa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 25 Nov 2025 13:10:34 +0000
Subject: [PATCH 231/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.30 to 2.11.31.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.31/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.30...v2.11.31)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 58dfb7af7..e29bb2cd2 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.30
+	github.com/traefik/traefik/v2 v2.11.31
 	golang.org/x/sync v0.18.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.2
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index c8c9d71bc..1b74775ae 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -343,8 +343,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.30 h1:Jkb5H8aI9lKQY/DDqwK3JP7iNUEnRfNLWXsr3azFf8w=
-github.com/traefik/traefik/v2 v2.11.30/go.mod h1:JNjmJuYf3VeE0XotmZKUcqqPVrVSZ2sdRqvht/ssOqk=
+github.com/traefik/traefik/v2 v2.11.31 h1:hkhUKL3JTAw+VFHFqC5LILAY3mXCXkXd1RWjoSgXTA4=
+github.com/traefik/traefik/v2 v2.11.31/go.mod h1:JNjmJuYf3VeE0XotmZKUcqqPVrVSZ2sdRqvht/ssOqk=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From b6604118d4f37d2da5bdf2b3822ee78484e393f2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 25 Nov 2025 16:42:11 +0000
Subject: [PATCH 232/427] chore(deps): bump body-parser in
 /tests/apps/checks-root

Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/checks-root/package-lock.json | 76 ++++++++++++++----------
 1 file changed, 44 insertions(+), 32 deletions(-)

diff --git a/tests/apps/checks-root/package-lock.json b/tests/apps/checks-root/package-lock.json
index 8055f97f6..f4aa2f714 100644
--- a/tests/apps/checks-root/package-lock.json
+++ b/tests/apps/checks-root/package-lock.json
@@ -28,23 +28,27 @@
       }
     },
     "node_modules/body-parser": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.0.tgz",
-      "integrity": "sha512-02qvAaxv8tp7fBa/mw1ga98OGm+eCbqzJOKoRt70sLmfEEi+jyBYVTDGfCL/k06/4EMk/z01gCe7HoCH/f2LTg==",
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.1.tgz",
+      "integrity": "sha512-nfDwkulwiZYQIGwxdy0RUmowMhKcFVcYXUU7m4QlKYim1rUtg83xm2yjZ40QjDuc291AJjjeSc9b++AWHSgSHw==",
       "license": "MIT",
       "dependencies": {
         "bytes": "^3.1.2",
         "content-type": "^1.0.5",
-        "debug": "^4.4.0",
+        "debug": "^4.4.3",
         "http-errors": "^2.0.0",
-        "iconv-lite": "^0.6.3",
+        "iconv-lite": "^0.7.0",
         "on-finished": "^2.4.1",
         "qs": "^6.14.0",
-        "raw-body": "^3.0.0",
-        "type-is": "^2.0.0"
+        "raw-body": "^3.0.1",
+        "type-is": "^2.0.1"
       },
       "engines": {
         "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/bytes": {
@@ -124,9 +128,9 @@
       }
     },
     "node_modules/debug": {
-      "version": "4.4.0",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
-      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "license": "MIT",
       "dependencies": {
         "ms": "^2.1.3"
@@ -383,31 +387,39 @@
       }
     },
     "node_modules/http-errors": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
-      "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
       "license": "MIT",
       "dependencies": {
-        "depd": "2.0.0",
-        "inherits": "2.0.4",
-        "setprototypeof": "1.2.0",
-        "statuses": "2.0.1",
-        "toidentifier": "1.0.1"
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
       },
       "engines": {
         "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/iconv-lite": {
-      "version": "0.6.3",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
-      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "version": "0.7.0",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.0.tgz",
+      "integrity": "sha512-cf6L2Ds3h57VVmkZe+Pn+5APsT7FpqJtEhhieDCvrE2MK5Qk9MyffgQyuxQTm6BChfeZNtcOLHp9IcWRVcIcBQ==",
       "license": "MIT",
       "dependencies": {
         "safer-buffer": ">= 2.1.2 < 3.0.0"
       },
       "engines": {
         "node": ">=0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/inherits": {
@@ -586,18 +598,18 @@
       }
     },
     "node_modules/raw-body": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.0.tgz",
-      "integrity": "sha512-RmkhL8CAyCRPXCE28MMH0z2PNWQBNk2Q09ZdxM9IOOXwxwZbN+qbWaatPkdkWIKL2ZVDImrN/pK5HTRz2PcS4g==",
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz",
+      "integrity": "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==",
       "license": "MIT",
       "dependencies": {
-        "bytes": "3.1.2",
-        "http-errors": "2.0.0",
-        "iconv-lite": "0.6.3",
-        "unpipe": "1.0.0"
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.7.0",
+        "unpipe": "~1.0.0"
       },
       "engines": {
-        "node": ">= 0.8"
+        "node": ">= 0.10"
       }
     },
     "node_modules/router": {
@@ -758,9 +770,9 @@
       }
     },
     "node_modules/statuses": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
-      "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
       "license": "MIT",
       "engines": {
         "node": ">= 0.8"

From b8ae0169e7d445327dadcb3e726be2f1d2930c34 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 26 Nov 2025 13:10:07 +0000
Subject: [PATCH 233/427] chore(deps): bump github.com/go-resty/resty/v2 in
 /plugins/scheduler-k3s

Bumps [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) from 2.16.5 to 2.17.0.
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](https://github.com/go-resty/resty/compare/v2.16.5...v2.17.0)

---
updated-dependencies:
- dependency-name: github.com/go-resty/resty/v2
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 85c8ae41c..df01c14af 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -15,7 +15,7 @@ require (
 	github.com/fatih/color v1.18.0
 	github.com/fluxcd/pkg/kustomize v1.24.0
 	github.com/go-openapi/jsonpointer v0.22.3
-	github.com/go-resty/resty/v2 v2.16.5
+	github.com/go-resty/resty/v2 v2.17.0
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index d860717d2..2917969e6 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -127,8 +127,8 @@ github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6
 github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
-github.com/go-resty/resty/v2 v2.16.5 h1:hBKqmWrr7uRc3euHVqmh1HTHcKn99Smr7o5spptdhTM=
-github.com/go-resty/resty/v2 v2.16.5/go.mod h1:hkJtXbA2iKHzJheXYvQ8snQES5ZLGKMwQ07xAwp/fiA=
+github.com/go-resty/resty/v2 v2.17.0 h1:pW9DeXcaL4Rrym4EZ8v7L19zZiIlWPg5YXAcVmt+gN0=
+github.com/go-resty/resty/v2 v2.17.0/go.mod h1:kCKZ3wWmwJaNc7S29BRtUhJwy7iqmn+2mLtQrOyQlVA=
 github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg=
 github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
 github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=

From b79f6d653177102e4e0f6d8abba712f6fb4ce80f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 27 Nov 2025 13:06:13 +0000
Subject: [PATCH 234/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.17.1 to 10.17.2.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.17.1...10.17.2)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 10.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index aa2deacda..d62b6d2f2 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.0
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
-pymdown-extensions==10.17.1
+pymdown-extensions==10.17.2
 pyparsing==3.2.5
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From c5c395ed6555246cd560a0dd3f63f01296755ba7 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 28 Nov 2025 02:53:36 -0500
Subject: [PATCH 235/427] docs: update logging in doc generation to enhance doc
 generation debugging

---
 contrib/build-docs | 35 ++++++++++++++++++++++++-----------
 1 file changed, 24 insertions(+), 11 deletions(-)

diff --git a/contrib/build-docs b/contrib/build-docs
index f454416cd..db0431023 100755
--- a/contrib/build-docs
+++ b/contrib/build-docs
@@ -135,20 +135,33 @@ main() {
   mv docs-main docs
   git checkout -- mkdocs.yml docs
 
-  if [[ "$(git -C tmp/docs-build ls-files -dmo)" == "docs/sitemap.xml.gz" ]]; then
+  echo "====> Checking for file changes"
+  changes=$(git -C tmp/docs-build ls-files -dmo)
+  if [[ -z "$changes" ]]; then
+    echo " !    No doc changes found"
+    exit 0
+  fi
+
+  if [[ "$changes" == "docs/sitemap.xml.gz" ]]; then
     echo " !    No doc changes found"
     git -C tmp/docs-build checkout -- docs/sitemap.xml.gz
-  else
-    echo "====> Pushing docs"
-    git -C tmp/docs-build add .
-    git -C tmp/docs-build commit -m "chore: regenerate docs"
-
-    if [[ -n "$BOT_GITHUB_USERNAME" ]] && [[ -n "$BOT_GITHUB_API_TOKEN" ]]; then
-      git -C tmp/docs-build remote set-url origin "https://$BOT_GITHUB_USERNAME:$BOT_GITHUB_API_TOKEN@github.com/dokku/docs.git"
-    fi
-
-    git -C tmp/docs-build push origin master
+    exit 0
   fi
+
+  echo "====> Changes found"
+  echo "$changes"
+
+  echo "====> Committing changes"
+  git -C tmp/docs-build add .
+  git -C tmp/docs-build commit -m "chore: regenerate docs"
+
+  echo "====> Pushing changes"
+  if [[ -n "$BOT_GITHUB_USERNAME" ]] && [[ -n "$BOT_GITHUB_API_TOKEN" ]]; then
+    git -C tmp/docs-build remote set-url origin "https://$BOT_GITHUB_USERNAME:$BOT_GITHUB_API_TOKEN@github.com/dokku/docs.git"
+  fi
+
+  git -C tmp/docs-build push origin master
+
 }
 
 main "$@"

From b90add9e4efd8f5075d363b2df4d8fec834b8182 Mon Sep 17 00:00:00 2001
From: Kazuhiro NISHIYAMA <znz@users.noreply.github.com>
Date: Sun, 30 Nov 2025 19:29:05 +0900
Subject: [PATCH 236/427] Fix version

---
 docs/appendices/0.37.0-migration-guide.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/appendices/0.37.0-migration-guide.md b/docs/appendices/0.37.0-migration-guide.md
index ddc44755a..b06b9c81d 100644
--- a/docs/appendices/0.37.0-migration-guide.md
+++ b/docs/appendices/0.37.0-migration-guide.md
@@ -1,4 +1,4 @@
-# 0.36.0 Migration Guide
+# 0.37.0 Migration Guide
 
 ## Changes
 

From 23924a092d59010db7862e93312770e0f2a3d78a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 1 Dec 2025 14:40:06 +0000
Subject: [PATCH 237/427] chore(deps): bump beautifulsoup4 from 4.14.2 to
 4.14.3 in /docs/_build

Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.14.2 to 4.14.3.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index d62b6d2f2..416398a32 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -1,4 +1,4 @@
-beautifulsoup4==4.14.2
+beautifulsoup4==4.14.3
 click==8.3.1
 ghp-import==2.1.0
 importlib-metadata==8.7.0

From b87f617d2f90b744941f228ef0e4b192b8e20e99 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 1 Dec 2025 15:27:36 +0000
Subject: [PATCH 238/427] chore(deps): bump werkzeug in
 /tests/apps/python-flask

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.1.3...3.1.4)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 05cd00c8c..db38980e6 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
-Werkzeug==3.1.3
+Werkzeug==3.1.4
 gunicorn==23.0.0
 

From 7f0050dbe751fb1eb1d031cc1cc40999b9167600 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 2 Dec 2025 20:51:07 -0500
Subject: [PATCH 239/427] fix: update url to download golang

---
 contrib/build-dokku.Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/build-dokku.Dockerfile b/contrib/build-dokku.Dockerfile
index 9593c2796..7f08388fa 100644
--- a/contrib/build-dokku.Dockerfile
+++ b/contrib/build-dokku.Dockerfile
@@ -7,7 +7,7 @@ ARG WORKDIR=/go/src/github.com/dokku/dokku
 
 WORKDIR ${WORKDIR}
 
-RUN wget -qO /tmp/go${GOLANG_VERSION}.linux.tar.gz "https://storage.googleapis.com/golang/go${GOLANG_VERSION}.linux-$(dpkg --print-architecture).tar.gz" \
+RUN wget -qO /tmp/go${GOLANG_VERSION}.linux.tar.gz "https://go.dev/dl/go${GOLANG_VERSION}.linux-$(dpkg --print-architecture).tar.gz" \
   && tar -C /usr/local -xzf /tmp/go${GOLANG_VERSION}.linux.tar.gz \
   && cp /usr/local/go/bin/* /usr/local/bin \
   && mkdir -p ${WORKDIR}/contrib

From 2e74fb85060a8d91deb492fb5e4efc5213ec0e53 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:38:54 +0000
Subject: [PATCH 240/427] chore(deps): bump express in
 /tests/apps/dockerfile-app-json-formations

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-app-json-formations/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-app-json-formations/package.json b/tests/apps/dockerfile-app-json-formations/package.json
index 32f763bb3..fbc0ffdac 100644
--- a/tests/apps/dockerfile-app-json-formations/package.json
+++ b/tests/apps/dockerfile-app-json-formations/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "5.1.x"
+    "express": "5.2.x"
   },
   "engines": {
     "node": "4.2.x"

From f3a47fba2b6981e2d621b1e39ff196d12c10355f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:48:46 +0000
Subject: [PATCH 241/427] chore(deps): bump express in
 /tests/apps/nodejs-express-noappjson

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/nodejs-express-noappjson/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/nodejs-express-noappjson/package.json b/tests/apps/nodejs-express-noappjson/package.json
index d6ab60955..213e958c2 100644
--- a/tests/apps/nodejs-express-noappjson/package.json
+++ b/tests/apps/nodejs-express-noappjson/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "5.1.x"
+    "express": "5.2.x"
   },
   "engines": {
     "node": "18.x.x"

From a6095d4496f23b5da05a0290d1078105fdf6bcc7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:48:49 +0000
Subject: [PATCH 242/427] chore(deps): bump express from 5.1.0 to 5.2.1 in
 /tests/apps/checks-root

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/checks-root/package-lock.json | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/tests/apps/checks-root/package-lock.json b/tests/apps/checks-root/package-lock.json
index f4aa2f714..674a517ef 100644
--- a/tests/apps/checks-root/package-lock.json
+++ b/tests/apps/checks-root/package-lock.json
@@ -228,18 +228,19 @@
       }
     },
     "node_modules/express": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/express/-/express-5.1.0.tgz",
-      "integrity": "sha512-DT9ck5YIRU+8GYzzU5kT3eHGA5iL+1Zd0EutOmTE9Dtk+Tvuzd23VBU+ec7HPNSTxXYO55gPV/hq4pSBJDjFpA==",
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+      "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^2.0.0",
-        "body-parser": "^2.2.0",
+        "body-parser": "^2.2.1",
         "content-disposition": "^1.0.0",
         "content-type": "^1.0.5",
         "cookie": "^0.7.1",
         "cookie-signature": "^1.2.1",
         "debug": "^4.4.0",
+        "depd": "^2.0.0",
         "encodeurl": "^2.0.0",
         "escape-html": "^1.0.3",
         "etag": "^1.8.1",

From 6fcdf61196b4f7fe1317c0b39be7599dde180394 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:51:05 +0000
Subject: [PATCH 243/427] chore(deps): bump express in
 /tests/apps/gitsubmodules

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gitsubmodules/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/gitsubmodules/package.json b/tests/apps/gitsubmodules/package.json
index aac71a77e..b66a507b6 100644
--- a/tests/apps/gitsubmodules/package.json
+++ b/tests/apps/gitsubmodules/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "~5.1.0"
+    "express": "~5.2.1"
   },
   "engines": {
     "node": "4.2.x"

From 61ca55b69791794c9047f1c4522b880c7eb6ae82 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:51:10 +0000
Subject: [PATCH 244/427] chore(deps): bump express in
 /tests/apps/dockerfile-procfile

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-procfile/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-procfile/package.json b/tests/apps/dockerfile-procfile/package.json
index 32f763bb3..fbc0ffdac 100644
--- a/tests/apps/dockerfile-procfile/package.json
+++ b/tests/apps/dockerfile-procfile/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "5.1.x"
+    "express": "5.2.x"
   },
   "engines": {
     "node": "4.2.x"

From 00ed4e41b1c70708fe940f4e5e95a5cb15954501 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:51:54 +0000
Subject: [PATCH 245/427] chore(deps): bump express in
 /tests/apps/dockerfile-procfile-bad

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-procfile-bad/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-procfile-bad/package.json b/tests/apps/dockerfile-procfile-bad/package.json
index 32f763bb3..fbc0ffdac 100644
--- a/tests/apps/dockerfile-procfile-bad/package.json
+++ b/tests/apps/dockerfile-procfile-bad/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "5.1.x"
+    "express": "5.2.x"
   },
   "engines": {
     "node": "4.2.x"

From f6699ba467667cf01905fb12469bfa8ed5802f3a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:52:53 +0000
Subject: [PATCH 246/427] chore(deps): bump express in
 /tests/apps/nodejs-express

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/nodejs-express/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/nodejs-express/package.json b/tests/apps/nodejs-express/package.json
index d6ab60955..213e958c2 100644
--- a/tests/apps/nodejs-express/package.json
+++ b/tests/apps/nodejs-express/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "5.1.x"
+    "express": "5.2.x"
   },
   "engines": {
     "node": "18.x.x"

From d43a23df5af34760a4d8defd6651f55d2ccac4c7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 02:53:02 +0000
Subject: [PATCH 247/427] chore(deps): bump express in
 /tests/apps/nodejs-express-noprocfile

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/nodejs-express-noprocfile/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/nodejs-express-noprocfile/package.json b/tests/apps/nodejs-express-noprocfile/package.json
index 8899e04c7..216976a24 100644
--- a/tests/apps/nodejs-express-noprocfile/package.json
+++ b/tests/apps/nodejs-express-noprocfile/package.json
@@ -2,7 +2,7 @@
   "name": "node-example",
   "version": "0.0.1",
   "dependencies": {
-    "express": "5.1.x"
+    "express": "5.2.x"
   },
   "engines": {
     "node": "4.2.x"

From 9918b0dd19ea9e7dff023d500380d0650886d7cc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:04:57 +0000
Subject: [PATCH 248/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-tini

Bumps golang from 1.25.4 to 1.25.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-tini/Dockerfile b/tests/apps/zombies-dockerfile-tini/Dockerfile
index a28465551..966da4eb9 100644
--- a/tests/apps/zombies-dockerfile-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4
+FROM golang:1.25.5
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 3157709b1167796d44cba0d06e1f66788b097374 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:04:57 +0000
Subject: [PATCH 249/427] chore(deps): bump golang from 1.25.4 to 1.25.5 in
 /tests/apps/gogrpc

Bumps golang from 1.25.4 to 1.25.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/gogrpc/Dockerfile b/tests/apps/gogrpc/Dockerfile
index fc64ee93c..15b60f105 100644
--- a/tests/apps/gogrpc/Dockerfile
+++ b/tests/apps/gogrpc/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4
+FROM golang:1.25.5
 
 RUN mkdir /app
 WORKDIR /app

From f962241557f23e9411663e635aaf238c7a51f327 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:04:59 +0000
Subject: [PATCH 250/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-no-tini

Bumps golang from 1.25.4 to 1.25.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-no-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-no-tini/Dockerfile b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
index b76de5e66..599b6b9ad 100644
--- a/tests/apps/zombies-dockerfile-no-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4
+FROM golang:1.25.5
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 1ae7467e5a793949f8d50080a631853693165b27 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:05:04 +0000
Subject: [PATCH 251/427] chore(deps): bump golang in
 /tests/apps/go-fail-postdeploy

Bumps golang from 1.25.4 to 1.25.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-postdeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-postdeploy/Dockerfile b/tests/apps/go-fail-postdeploy/Dockerfile
index 2669b78d4..939511210 100644
--- a/tests/apps/go-fail-postdeploy/Dockerfile
+++ b/tests/apps/go-fail-postdeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4
+FROM golang:1.25.5
 
 EXPOSE 3000/tcp
 

From af4f126b783a4a8d74a831fcc07a31a68c9508c0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:05:05 +0000
Subject: [PATCH 252/427] chore(deps): bump python in /docs/_build

Bumps python from 3.14.0-alpine to 3.14.1-alpine.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.1-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/Dockerfile b/docs/_build/Dockerfile
index e07981907..e4f4260f6 100644
--- a/docs/_build/Dockerfile
+++ b/docs/_build/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.14.0-alpine
+FROM python:3.14.1-alpine
 
 WORKDIR /usr/src/app
 

From 2a0f3f50340918188bba1f1917d593f0e7d1e6a0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:05:05 +0000
Subject: [PATCH 253/427] chore(deps): bump golang in
 /tests/apps/go-fail-predeploy

Bumps golang from 1.25.4 to 1.25.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-predeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-predeploy/Dockerfile b/tests/apps/go-fail-predeploy/Dockerfile
index 2669b78d4..939511210 100644
--- a/tests/apps/go-fail-predeploy/Dockerfile
+++ b/tests/apps/go-fail-predeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.4
+FROM golang:1.25.5
 
 EXPOSE 3000/tcp
 

From 5330a2ac7e723f37a25c504e50c696bd3c06420a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:05:07 +0000
Subject: [PATCH 254/427] chore(deps): bump python in
 /tests/apps/dockerfile-release

Bumps python from 3.14.0-bookworm to 3.14.1-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.1-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-release/Dockerfile b/tests/apps/dockerfile-release/Dockerfile
index 60023b308..64556ee91 100644
--- a/tests/apps/dockerfile-release/Dockerfile
+++ b/tests/apps/dockerfile-release/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.14.0-bookworm
+FROM python:3.14.1-bookworm
 
 RUN pip install --user pipenv
 ENV PATH="${PATH}:/root/.local/bin"

From 2737e691cec7eb631a028148288b7d842fa46c49 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:11:06 +0000
Subject: [PATCH 255/427] chore(deps): bump django in
 /tests/apps/dockerfile-release

Bumps [django](https://github.com/django/django) from 5.2.8 to 5.2.9.
- [Commits](https://github.com/django/django/compare/5.2.8...5.2.9)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index a66766a83..f41cef640 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -18,11 +18,11 @@
     "default": {
         "asgiref": {
             "hashes": [
-                "sha256:aef8a81283a34d0ab31630c9b7dfe70c812c95eba78171367ca8745e88124734",
-                "sha256:d89f2d8cd8b56dada7d52fa7dc8075baa08fb836560710d38c292a7a3f78c04e"
+                "sha256:13acff32519542a1736223fb79a715acdebe24286d98e8b164a73085f40da2c4",
+                "sha256:1db9021efadb0d9512ce8ffaf72fcef601c7b73a8807a1bb2ef143dc6b14846d"
             ],
             "markers": "python_version >= '3.9'",
-            "version": "==3.10.0"
+            "version": "==3.11.0"
         },
         "dj-database-url": {
             "hashes": [
@@ -34,12 +34,12 @@
         },
         "django": {
             "hashes": [
-                "sha256:23254866a5bb9a2cfa6004e8b809ec6246eba4b58a7589bc2772f1bcc8456c7f",
-                "sha256:37e687f7bd73ddf043e2b6b97cfe02fcbb11f2dbb3adccc6a2b18c6daa054d7f"
+                "sha256:16b5ccfc5e8c27e6c0561af551d2ea32852d7352c67d452ae3e76b4f6b2ca495",
+                "sha256:3a4ea88a70370557ab1930b332fd2887a9f48654261cdffda663fef5976bb00a"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.2.8"
+            "version": "==5.2.9"
         },
         "djangorestframework": {
             "hashes": [
@@ -147,11 +147,11 @@
         },
         "sqlparse": {
             "hashes": [
-                "sha256:09f67787f56a0b16ecdbde1bfc7f5d9c3371ca683cfeaa8e6ff60b4807ec9272",
-                "sha256:cf2196ed3418f3ba5de6af7e82c694a9fbdbfecccdfc72e281548517081f16ca"
+                "sha256:4396a7d3cf1cd679c1be976cf3dc6e0a51d0111e87787e7a8d780e7d5a998f9e",
+                "sha256:99a9f0314977b76d776a0fcb8554de91b9bb8a18560631d6bc48721d07023dcb"
             ],
             "markers": "python_version >= '3.8'",
-            "version": "==0.5.3"
+            "version": "==0.5.4"
         },
         "whitenoise": {
             "hashes": [

From c17bab994a12043a3d224e7215282ca72b5d9ab8 Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Thu, 4 Dec 2025 04:53:29 +0000
Subject: [PATCH 256/427] Release 0.37.1

# History

## 0.37.1

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.1/bootstrap.sh
sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh
```

### Bug Fixes

- #8186: @josegonzalez Update url to download golang
- #8155: @josegonzalez Sanitize vector sink values in report output
- #8156: @josegonzalez Do not start nginx if there are no apps with nginx as a proxy
- #8152: @josegonzalez Ensure keda usage does not cause jank in scaling deployments

### New Features

- #8154: @josegonzalez Enable live-restore by default when installing Dokku
- #8151: @josegonzalez Allow exposing non-web processes as kubernetes services

### Refactors

- #8149: @josegonzalez Remove nginx checks for functionality that always exists

### Documentation

- #8170: @znz Fix version in migration docs
- #8169: @josegonzalez Update logging in doc generation to enhance doc generation debugging
- #8153: @josegonzalez Fix reference to letsencrypt-server property
- #8150: @josegonzalez Clarify system requirements for k3s usage
- #8148: @josegonzalez Clarify plugin installation documentation

### Dependencies

- #8192: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/go-fail-predeploy
- #8191: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/go-fail-postdeploy
- #8189: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/gogrpc
- #8193: @dependabot[bot] chore(deps): bump python from 3.14.0-alpine to 3.14.1-alpine in /docs/_build
- #8190: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/zombies-dockerfile-no-tini
- #8188: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/zombies-dockerfile-tini
- #8194: @dependabot[bot] chore(deps): bump python from 3.14.0-bookworm to 3.14.1-bookworm in /tests/apps/dockerfile-release
- #8195: @dependabot[bot] chore(deps): bump django from 5.2.8 to 5.2.9 in /tests/apps/dockerfile-release
- #8177: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/nodejs-express-noprocfile
- #8178: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/dockerfile-procfile-bad
- #8179: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/nodejs-express
- #8180: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/dockerfile-procfile
- #8181: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/gitsubmodules
- #8183: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/checks-root
- #8182: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/nodejs-express-noappjson
- #8184: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/dockerfile-app-json-formations
- #8172: @dependabot[bot] chore(deps): bump beautifulsoup4 from 4.14.2 to 4.14.3 in /docs/_build
- #8173: @dependabot[bot] chore(deps): bump werkzeug from 3.1.3 to 3.1.4 in /tests/apps/python-flask
- #8164: @dependabot[bot] chore(deps): bump body-parser from 2.2.0 to 2.2.1 in /tests/apps/checks-root
- #8165: @dependabot[bot] chore(deps): bump github.com/go-resty/resty/v2 from 2.16.5 to 2.17.0 in /plugins/scheduler-k3s
- #8167: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.17.1 to 10.17.2 in /docs/_build
- #8162: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.30 to 2.11.31 in /plugins/scheduler-k3s
- #8161: @dependabot[bot] chore(deps): bump github.com/fluxcd/pkg/kustomize from 1.23.0 to 1.24.0 in /plugins/scheduler-k3s
- #8159: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.0 to 3.19.2 in /plugins/scheduler-k3s
- #8158: @dependabot[bot] chore(deps): bump k8s.io/kubernetes from 1.34.1 to 1.34.2 in /plugins/scheduler-k3s
- #8143: @dependabot[bot] chore(deps): bump actions/checkout from 5 to 6
- #8145: @dependabot[bot] chore(deps): bump github.com/go-openapi/jsonpointer from 0.22.1 to 0.22.3 in /plugins/scheduler-k3s
- #8146: @dependabot[bot] chore(deps): bump k8s.io/kubectl from 0.34.1 to 0.34.2 in /plugins/scheduler-k3s
- #8144: @dependabot[bot] chore(deps): bump traefik from 3.6.1 to 3.6.2 in /plugins/traefik-vhosts
---
 HISTORY.md                                 | 65 ++++++++++++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++--
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 ++++++-------
 docs/template.html                         | 36 ++++++------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 56 files changed, 197 insertions(+), 132 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index 04fc55999..e00cec5af 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,70 @@
 # History
 
+## 0.37.1
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.1/bootstrap.sh
+sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8186: @josegonzalez Update url to download golang
+- #8155: @josegonzalez Sanitize vector sink values in report output
+- #8156: @josegonzalez Do not start nginx if there are no apps with nginx as a proxy
+- #8152: @josegonzalez Ensure keda usage does not cause jank in scaling deployments
+
+### New Features
+
+- #8154: @josegonzalez Enable live-restore by default when installing Dokku
+- #8151: @josegonzalez Allow exposing non-web processes as kubernetes services
+
+### Refactors
+
+- #8149: @josegonzalez Remove nginx checks for functionality that always exists
+
+### Documentation
+
+- #8170: @znz Fix version in migration docs
+- #8169: @josegonzalez Update logging in doc generation to enhance doc generation debugging
+- #8153: @josegonzalez Fix reference to letsencrypt-server property
+- #8150: @josegonzalez Clarify system requirements for k3s usage
+- #8148: @josegonzalez Clarify plugin installation documentation
+
+### Dependencies
+
+- #8192: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/go-fail-predeploy
+- #8191: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/go-fail-postdeploy
+- #8189: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/gogrpc
+- #8193: @dependabot[bot] chore(deps): bump python from 3.14.0-alpine to 3.14.1-alpine in /docs/_build
+- #8190: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/zombies-dockerfile-no-tini
+- #8188: @dependabot[bot] chore(deps): bump golang from 1.25.4 to 1.25.5 in /tests/apps/zombies-dockerfile-tini
+- #8194: @dependabot[bot] chore(deps): bump python from 3.14.0-bookworm to 3.14.1-bookworm in /tests/apps/dockerfile-release
+- #8195: @dependabot[bot] chore(deps): bump django from 5.2.8 to 5.2.9 in /tests/apps/dockerfile-release
+- #8177: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/nodejs-express-noprocfile
+- #8178: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/dockerfile-procfile-bad
+- #8179: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/nodejs-express
+- #8180: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/dockerfile-procfile
+- #8181: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/gitsubmodules
+- #8183: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/checks-root
+- #8182: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/nodejs-express-noappjson
+- #8184: @dependabot[bot] chore(deps): bump express from 5.1.0 to 5.2.1 in /tests/apps/dockerfile-app-json-formations
+- #8172: @dependabot[bot] chore(deps): bump beautifulsoup4 from 4.14.2 to 4.14.3 in /docs/_build
+- #8173: @dependabot[bot] chore(deps): bump werkzeug from 3.1.3 to 3.1.4 in /tests/apps/python-flask
+- #8164: @dependabot[bot] chore(deps): bump body-parser from 2.2.0 to 2.2.1 in /tests/apps/checks-root
+- #8165: @dependabot[bot] chore(deps): bump github.com/go-resty/resty/v2 from 2.16.5 to 2.17.0 in /plugins/scheduler-k3s
+- #8167: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.17.1 to 10.17.2 in /docs/_build
+- #8162: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.30 to 2.11.31 in /plugins/scheduler-k3s
+- #8161: @dependabot[bot] chore(deps): bump github.com/fluxcd/pkg/kustomize from 1.23.0 to 1.24.0 in /plugins/scheduler-k3s
+- #8159: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.0 to 3.19.2 in /plugins/scheduler-k3s
+- #8158: @dependabot[bot] chore(deps): bump k8s.io/kubernetes from 1.34.1 to 1.34.2 in /plugins/scheduler-k3s
+- #8143: @dependabot[bot] chore(deps): bump actions/checkout from 5 to 6
+- #8145: @dependabot[bot] chore(deps): bump github.com/go-openapi/jsonpointer from 0.22.1 to 0.22.3 in /plugins/scheduler-k3s
+- #8146: @dependabot[bot] chore(deps): bump k8s.io/kubectl from 0.34.1 to 0.34.2 in /plugins/scheduler-k3s
+- #8144: @dependabot[bot] chore(deps): bump traefik from 3.6.1 to 3.6.2 in /plugins/traefik-vhosts
+
 ## 0.37.0
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 3c2d2b7a9..964c9fa11 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.37.0/bootstrap.sh
-sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.1/bootstrap.sh
+sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index 82b6eeaa4..cb828f163 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.37.0
+Version: 0.37.1
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index af01a7045..ad10c4fad 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.37.0 enabled    dokku core standard plugin
-  20_events            0.37.0 enabled    dokku core events logging plugin
-  app-json             0.37.0 enabled    dokku core app-json plugin
-  apps                 0.37.0 enabled    dokku core apps plugin
-  build-env            0.37.0 enabled    dokku core build-env plugin
-  buildpacks           0.37.0 enabled    dokku core buildpacks plugin
-  certs                0.37.0 enabled    dokku core certificate management plugin
-  checks               0.37.0 enabled    dokku core checks plugin
-  common               0.37.0 enabled    dokku core common plugin
-  config               0.37.0 enabled    dokku core config plugin
-  docker-options       0.37.0 enabled    dokku core docker-options plugin
-  domains              0.37.0 enabled    dokku core domains plugin
-  enter                0.37.0 enabled    dokku core enter plugin
-  git                  0.37.0 enabled    dokku core git plugin
-  logs                 0.37.0 enabled    dokku core logs plugin
-  network              0.37.0 enabled    dokku core network plugin
-  nginx-vhosts         0.37.0 enabled    dokku core nginx-vhosts plugin
-  plugin               0.37.0 enabled    dokku core plugin plugin
-  proxy                0.37.0 enabled    dokku core proxy plugin
-  ps                   0.37.0 enabled    dokku core ps plugin
-  repo                 0.37.0 enabled    dokku core repo plugin
-  resource             0.37.0 enabled    dokku core resource plugin
-  scheduler-docker-local 0.37.0 enabled    dokku core scheduler-docker-local plugin
-  shell                0.37.0 enabled    dokku core shell plugin
-  ssh-keys             0.37.0 enabled    dokku core ssh-keys plugin
-  storage              0.37.0 enabled    dokku core storage plugin
-  tags                 0.37.0 enabled    dokku core tags plugin
-  tar                  0.37.0 enabled    dokku core tar plugin
-  trace                0.37.0 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.1 enabled    dokku core standard plugin
+  20_events            0.37.1 enabled    dokku core events logging plugin
+  app-json             0.37.1 enabled    dokku core app-json plugin
+  apps                 0.37.1 enabled    dokku core apps plugin
+  build-env            0.37.1 enabled    dokku core build-env plugin
+  buildpacks           0.37.1 enabled    dokku core buildpacks plugin
+  certs                0.37.1 enabled    dokku core certificate management plugin
+  checks               0.37.1 enabled    dokku core checks plugin
+  common               0.37.1 enabled    dokku core common plugin
+  config               0.37.1 enabled    dokku core config plugin
+  docker-options       0.37.1 enabled    dokku core docker-options plugin
+  domains              0.37.1 enabled    dokku core domains plugin
+  enter                0.37.1 enabled    dokku core enter plugin
+  git                  0.37.1 enabled    dokku core git plugin
+  logs                 0.37.1 enabled    dokku core logs plugin
+  network              0.37.1 enabled    dokku core network plugin
+  nginx-vhosts         0.37.1 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.1 enabled    dokku core plugin plugin
+  proxy                0.37.1 enabled    dokku core proxy plugin
+  ps                   0.37.1 enabled    dokku core ps plugin
+  repo                 0.37.1 enabled    dokku core repo plugin
+  resource             0.37.1 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.1 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.1 enabled    dokku core shell plugin
+  ssh-keys             0.37.1 enabled    dokku core ssh-keys plugin
+  storage              0.37.1 enabled    dokku core storage plugin
+  tags                 0.37.1 enabled    dokku core tags plugin
+  tar                  0.37.1 enabled    dokku core tar plugin
+  trace                0.37.1 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index 180622416..c5cd2fda6 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index d87939b40..7ef08fa6e 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.0\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index e587ecd7a..da3feddf3 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -34,6 +34,6 @@
     "0.34.9",
     "0.35.20",
     "0.36.11",
-    "0.37.0"
+    "0.37.1"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index d1cf82ed5..92fc18b41 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.37.0-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.1-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 6af458b0b..18f9ec7a0 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.37.0
+docker pull dokku/dokku:0.37.1
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.37.0
+  dokku/dokku:0.37.1
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.37.0
+    image: dokku/dokku:0.37.1
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.37.0
+FROM dokku/dokku:0.37.1
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 634499761..3deb99887 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -31,8 +31,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.37.0/bootstrap.sh
-sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.1/bootstrap.sh
+sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index 58ef033b2..4d5f61f5b 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.0</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.1</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.37.0 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index a2fb46b5b..84b551019 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.0/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index ec367b7b0..e24302512 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index 69f036915..83c960b73 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index 94e9a31f4..c71552619 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index 65380f46e..7ac67dea2 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index 1f7a1147f..916ec66d5 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index 199da3745..c96063854 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 85d81da4a..61ee3cd3b 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index 8f97e0623..c402db064 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 71600928e..6992be10a 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index d53b214fb..482a0baac 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index c54c8061a..1cb64ddf5 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index c172d5d26..225d19284 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index 049fc0e50..c5e3430bc 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 6a67d7dab..689e9fe59 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 7a3c95dcd..25cd1478f 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index a54c4df7e..f849f3a2d 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 2f979b84d..604f06ab0 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index c99302c05..465370b8b 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index 7131dcc71..aeff798b2 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 7e2068335..0a142308d 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index 14ed7e4a3..e5a3d8f3d 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index 5e310cee8..c89ddcbaf 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index ca50908fa..a3c4c773e 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index c815d0bb0..e5a559c9e 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index ab95a0798..d1e798125 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 6b9bc06d7..7440a0045 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 3e72dc556..7545fc9aa 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 4169e9224..e01f8e8f9 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 8c69b050d..709c7f04b 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index b6f8003cb..b6c7389b1 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 3d9a385f1..59090c7af 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index 85a9b5cce..407d365ae 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index b9f1ac6e6..c134256cf 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 6955ebdaf..8f04cfbe5 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 098fa9eb3..900ef48db 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 3784f0e3f..965de78d7 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index e55f78c70..acce21937 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index 2a1c38f93..deebd52e5 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 4c49f6fd7..afb4df98f 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 0a85dfeb0..1fdf9d1c9 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index f4b926ca4..0b9ab9bd2 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 7c500f10f..68154f0b3 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 8f3d10d87..fcf2fcc27 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index f1cb20663..1dd23f19d 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.37.0"
+version = "0.37.1"
 [plugin.config]

From ff81f5784062741d3345c525eb26844d8aaf486b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 5 Dec 2025 13:08:46 +0000
Subject: [PATCH 257/427] chore(deps): bump byjg/easy-haproxy in
 /plugins/haproxy-vhosts

Bumps byjg/easy-haproxy from 4.6.0 to 5.0.0.

---
updated-dependencies:
- dependency-name: byjg/easy-haproxy
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/haproxy-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/haproxy-vhosts/Dockerfile b/plugins/haproxy-vhosts/Dockerfile
index 7a963e695..dfca69b27 100644
--- a/plugins/haproxy-vhosts/Dockerfile
+++ b/plugins/haproxy-vhosts/Dockerfile
@@ -1 +1 @@
-FROM byjg/easy-haproxy:4.6.0
+FROM byjg/easy-haproxy:5.0.0

From 39f47b70d30c05c4878fcc5d5067f9db02992e17 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 5 Dec 2025 13:09:24 +0000
Subject: [PATCH 258/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.31 to 2.11.32.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.32/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.31...v2.11.32)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index df01c14af..f12552efe 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.31
+	github.com/traefik/traefik/v2 v2.11.32
 	golang.org/x/sync v0.18.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.2
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2917969e6..26490a17a 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -343,8 +343,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.31 h1:hkhUKL3JTAw+VFHFqC5LILAY3mXCXkXd1RWjoSgXTA4=
-github.com/traefik/traefik/v2 v2.11.31/go.mod h1:JNjmJuYf3VeE0XotmZKUcqqPVrVSZ2sdRqvht/ssOqk=
+github.com/traefik/traefik/v2 v2.11.32 h1:SoUgYd0TgoQWHmsDUPGcIklzx54xiIPZ9PK5YFEU7Jc=
+github.com/traefik/traefik/v2 v2.11.32/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From 129691eb6e0c58dbb4637032454585f5564044f8 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 5 Dec 2025 20:16:15 -0500
Subject: [PATCH 259/427] fix: ensure we continue on with logic if the error
 returned from fetching all apps is NoAppsExist

This makes it so we don't accidentally skip logic that happens after iterate over the apps.
---
 plugins/apps/triggers.go      | 3 ++-
 plugins/builder/triggers.go   | 2 +-
 plugins/common/data.go        | 3 ++-
 plugins/common/triggers.go    | 3 ++-
 plugins/network/triggers.go   | 3 ++-
 plugins/ports/triggers.go     | 3 ++-
 plugins/ps/triggers.go        | 2 +-
 plugins/scheduler/triggers.go | 3 ++-
 8 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/plugins/apps/triggers.go b/plugins/apps/triggers.go
index ad16adb10..32bfbd515 100644
--- a/plugins/apps/triggers.go
+++ b/plugins/apps/triggers.go
@@ -1,6 +1,7 @@
 package apps
 
 import (
+	"errors"
 	"fmt"
 	"os"
 	"time"
@@ -48,7 +49,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := common.UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, common.NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/builder/triggers.go b/plugins/builder/triggers.go
index dfbd57683..a47c48a78 100644
--- a/plugins/builder/triggers.go
+++ b/plugins/builder/triggers.go
@@ -109,7 +109,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := common.UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, common.NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/common/data.go b/plugins/common/data.go
index a3c1e8092..075ae06d5 100644
--- a/plugins/common/data.go
+++ b/plugins/common/data.go
@@ -1,6 +1,7 @@
 package common
 
 import (
+	"errors"
 	"fmt"
 	"os"
 	"path/filepath"
@@ -78,7 +79,7 @@ func SetupAppData(pluginName string) error {
 	}
 
 	apps, err := UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/common/triggers.go b/plugins/common/triggers.go
index 2c10767da..dd5ae5c5c 100644
--- a/plugins/common/triggers.go
+++ b/plugins/common/triggers.go
@@ -1,6 +1,7 @@
 package common
 
 import (
+	"errors"
 	"fmt"
 )
 
@@ -34,7 +35,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/network/triggers.go b/plugins/network/triggers.go
index 370ffd68f..c6035310b 100644
--- a/plugins/network/triggers.go
+++ b/plugins/network/triggers.go
@@ -1,6 +1,7 @@
 package network
 
 import (
+	"errors"
 	"fmt"
 	"io"
 	"os"
@@ -37,7 +38,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := common.UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, common.NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/ports/triggers.go b/plugins/ports/triggers.go
index bb4e7a83d..c8c4288a0 100644
--- a/plugins/ports/triggers.go
+++ b/plugins/ports/triggers.go
@@ -2,6 +2,7 @@ package ports
 
 import (
 	"encoding/json"
+	"errors"
 	"fmt"
 	"sort"
 
@@ -16,7 +17,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := common.UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, common.NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/ps/triggers.go b/plugins/ps/triggers.go
index aa2282460..22471053d 100644
--- a/plugins/ps/triggers.go
+++ b/plugins/ps/triggers.go
@@ -100,7 +100,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := common.UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, common.NoAppsExist) {
 		return nil
 	}
 
diff --git a/plugins/scheduler/triggers.go b/plugins/scheduler/triggers.go
index a83ce8013..a7f38ec5f 100644
--- a/plugins/scheduler/triggers.go
+++ b/plugins/scheduler/triggers.go
@@ -1,6 +1,7 @@
 package scheduler
 
 import (
+	"errors"
 	"fmt"
 
 	"github.com/dokku/dokku/plugins/common"
@@ -31,7 +32,7 @@ func TriggerInstall() error {
 	}
 
 	apps, err := common.UnfilteredDokkuApps()
-	if err != nil {
+	if err != nil && !errors.Is(err, common.NoAppsExist) {
 		return nil
 	}
 

From 1ab923c25273579efa5569f84cfb360cb30716bd Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Sat, 6 Dec 2025 03:20:03 +0000
Subject: [PATCH 260/427] Release 0.37.2

# History

## 0.37.2

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.2/bootstrap.sh
sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh
```

### Bug Fixes

- #8198: @josegonzalez Ensure we continue on with logic if the error returned from fetching all apps is NoAppsExist

### Dependencies

- #8196: @dependabot[bot] chore(deps): bump byjg/easy-haproxy from 4.6.0 to 5.0.0 in /plugins/haproxy-vhosts
- #8197: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.31 to 2.11.32 in /plugins/scheduler-k3s
---
 HISTORY.md                                 | 18 +++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/style.css                      | 10 ++--
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 57 files changed, 155 insertions(+), 137 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index e00cec5af..b754a8fb7 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,23 @@
 # History
 
+## 0.37.2
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.2/bootstrap.sh
+sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8198: @josegonzalez Ensure we continue on with logic if the error returned from fetching all apps is NoAppsExist
+
+### Dependencies
+
+- #8196: @dependabot[bot] chore(deps): bump byjg/easy-haproxy from 4.6.0 to 5.0.0 in /plugins/haproxy-vhosts
+- #8197: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.31 to 2.11.32 in /plugins/scheduler-k3s
+
 ## 0.37.1
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 964c9fa11..95858cb8c 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.37.1/bootstrap.sh
-sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.2/bootstrap.sh
+sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index cb828f163..4eefe6c86 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.37.1
+Version: 0.37.2
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index ad10c4fad..1644db360 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.37.1 enabled    dokku core standard plugin
-  20_events            0.37.1 enabled    dokku core events logging plugin
-  app-json             0.37.1 enabled    dokku core app-json plugin
-  apps                 0.37.1 enabled    dokku core apps plugin
-  build-env            0.37.1 enabled    dokku core build-env plugin
-  buildpacks           0.37.1 enabled    dokku core buildpacks plugin
-  certs                0.37.1 enabled    dokku core certificate management plugin
-  checks               0.37.1 enabled    dokku core checks plugin
-  common               0.37.1 enabled    dokku core common plugin
-  config               0.37.1 enabled    dokku core config plugin
-  docker-options       0.37.1 enabled    dokku core docker-options plugin
-  domains              0.37.1 enabled    dokku core domains plugin
-  enter                0.37.1 enabled    dokku core enter plugin
-  git                  0.37.1 enabled    dokku core git plugin
-  logs                 0.37.1 enabled    dokku core logs plugin
-  network              0.37.1 enabled    dokku core network plugin
-  nginx-vhosts         0.37.1 enabled    dokku core nginx-vhosts plugin
-  plugin               0.37.1 enabled    dokku core plugin plugin
-  proxy                0.37.1 enabled    dokku core proxy plugin
-  ps                   0.37.1 enabled    dokku core ps plugin
-  repo                 0.37.1 enabled    dokku core repo plugin
-  resource             0.37.1 enabled    dokku core resource plugin
-  scheduler-docker-local 0.37.1 enabled    dokku core scheduler-docker-local plugin
-  shell                0.37.1 enabled    dokku core shell plugin
-  ssh-keys             0.37.1 enabled    dokku core ssh-keys plugin
-  storage              0.37.1 enabled    dokku core storage plugin
-  tags                 0.37.1 enabled    dokku core tags plugin
-  tar                  0.37.1 enabled    dokku core tar plugin
-  trace                0.37.1 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.2 enabled    dokku core standard plugin
+  20_events            0.37.2 enabled    dokku core events logging plugin
+  app-json             0.37.2 enabled    dokku core app-json plugin
+  apps                 0.37.2 enabled    dokku core apps plugin
+  build-env            0.37.2 enabled    dokku core build-env plugin
+  buildpacks           0.37.2 enabled    dokku core buildpacks plugin
+  certs                0.37.2 enabled    dokku core certificate management plugin
+  checks               0.37.2 enabled    dokku core checks plugin
+  common               0.37.2 enabled    dokku core common plugin
+  config               0.37.2 enabled    dokku core config plugin
+  docker-options       0.37.2 enabled    dokku core docker-options plugin
+  domains              0.37.2 enabled    dokku core domains plugin
+  enter                0.37.2 enabled    dokku core enter plugin
+  git                  0.37.2 enabled    dokku core git plugin
+  logs                 0.37.2 enabled    dokku core logs plugin
+  network              0.37.2 enabled    dokku core network plugin
+  nginx-vhosts         0.37.2 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.2 enabled    dokku core plugin plugin
+  proxy                0.37.2 enabled    dokku core proxy plugin
+  ps                   0.37.2 enabled    dokku core ps plugin
+  repo                 0.37.2 enabled    dokku core repo plugin
+  resource             0.37.2 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.2 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.2 enabled    dokku core shell plugin
+  ssh-keys             0.37.2 enabled    dokku core ssh-keys plugin
+  storage              0.37.2 enabled    dokku core storage plugin
+  tags                 0.37.2 enabled    dokku core tags plugin
+  tar                  0.37.2 enabled    dokku core tar plugin
+  trace                0.37.2 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index c5cd2fda6..cdc2c64fb 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 7ef08fa6e..219597bca 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.1\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/style.css b/docs/assets/style.css
index c996d55b5..5d490de52 100644
--- a/docs/assets/style.css
+++ b/docs/assets/style.css
@@ -25,9 +25,9 @@
 
   /* Avatar section darkmode fade */
   --avatar-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #043791 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.2 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
   --avatar-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #043791 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.2 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
 }
 
 body {
@@ -1191,15 +1191,15 @@ ul.fas li .fa-large:before {
 
   .getting-started::after {
     background: linear-gradient(0deg, rgba(52, 52, 87, 0.2) -40.97%, rgba(0, 0, 0, 0) 103.19%),
-      #043791;
+      #0.37.2;
   }
 
   .tab-content {
-    background: #043791;
+    background: #0.37.2;
   }
 
   .nav-tabs {
-    background: #043791;
+    background: #0.37.2;
   }
 
   .powered-by_brands {
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index da3feddf3..274939f64 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -34,6 +34,6 @@
     "0.34.9",
     "0.35.20",
     "0.36.11",
-    "0.37.1"
+    "0.37.2"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 92fc18b41..8ee194040 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.37.1-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.2-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 18f9ec7a0..2a9adee8f 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.37.1
+docker pull dokku/dokku:0.37.2
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.37.1
+  dokku/dokku:0.37.2
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.37.1
+    image: dokku/dokku:0.37.2
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.37.1
+FROM dokku/dokku:0.37.2
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 3deb99887..7909b185d 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -31,8 +31,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.37.1/bootstrap.sh
-sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.2/bootstrap.sh
+sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index 4d5f61f5b..aad7dc71f 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.1</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.2</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.37.1 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 84b551019..cc7e06fe4 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.1/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index e24302512..360808464 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index 83c960b73..bf85d8d27 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index c71552619..3b5530ef1 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index 7ac67dea2..9c61d9587 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index 916ec66d5..b294bfeb0 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index c96063854..033aa2daf 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 61ee3cd3b..7ca04a806 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index c402db064..ccc627d32 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 6992be10a..19a85a563 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 482a0baac..31e7776fe 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 1cb64ddf5..9ffcaa306 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index 225d19284..1522edab5 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index c5e3430bc..6a341e5e7 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 689e9fe59..68e5ab9f2 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 25cd1478f..dcdc6c9ca 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index f849f3a2d..898f0e556 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 604f06ab0..20e5452a1 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 465370b8b..693551af4 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index aeff798b2..5381c24b9 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 0a142308d..545fbcfb9 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index e5a3d8f3d..e68ba6838 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index c89ddcbaf..5900a1b28 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index a3c4c773e..30215f8e9 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index e5a559c9e..b3fd6a28c 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index d1e798125..5079288b8 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 7440a0045..d2f14da9d 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 7545fc9aa..085568f34 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index e01f8e8f9..b96ba6640 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 709c7f04b..5188fcae8 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index b6c7389b1..9a8a44e87 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 59090c7af..1360bcdef 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index 407d365ae..ca808a00c 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index c134256cf..e3fed3ac3 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 8f04cfbe5..4df9daf97 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 900ef48db..9de6dcba1 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 965de78d7..0fd8e847d 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index acce21937..d60ba18a9 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index deebd52e5..bbbb99308 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index afb4df98f..4833dd7e5 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 1fdf9d1c9..3d172e877 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 0b9ab9bd2..faa744009 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 68154f0b3..d3a46bd2d 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index fcf2fcc27..581b68253 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 1dd23f19d..6f0649cb7 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.37.1"
+version = "0.37.2"
 [plugin.config]

From 1f334b496f5997e57e3fa720a2e1298219eba7ed Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Dec 2025 13:06:17 +0000
Subject: [PATCH 261/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.17.2 to 10.18.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.17.2...10.18)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: '10.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 416398a32..68d2e80bd 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.0
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
-pymdown-extensions==10.17.2
+pymdown-extensions==10.18
 pyparsing==3.2.5
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From 24c4652b90acfef6548caa75b6b01fedacc51185 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Dec 2025 13:08:17 +0000
Subject: [PATCH 262/427] chore(deps): bump golang.org/x/sync in
 /plugins/scheduler-docker-local

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.18.0 to 0.19.0.
- [Commits](https://github.com/golang/sync/compare/v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-docker-local/go.mod | 2 +-
 plugins/scheduler-docker-local/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-docker-local/go.mod b/plugins/scheduler-docker-local/go.mod
index ba4124707..30855082f 100644
--- a/plugins/scheduler-docker-local/go.mod
+++ b/plugins/scheduler-docker-local/go.mod
@@ -6,7 +6,7 @@ require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/dokku/dokku/plugins/cron v0.0.0-00010101000000-000000000000
 	github.com/multiformats/go-base36 v0.2.0
-	golang.org/x/sync v0.18.0
+	golang.org/x/sync v0.19.0
 )
 
 require (
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index 0b963e588..0e84c5a1f 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -73,8 +73,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=

From 78c1ac5dbde1dc553428d81830030e3395caa008 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Dec 2025 13:09:43 +0000
Subject: [PATCH 263/427] chore(deps): bump traefik from 3.6.2 to 3.6.4 in
 /plugins/traefik-vhosts

Bumps traefik from 3.6.2 to 3.6.4.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index fcb1c5032..577309c38 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.6.2
+FROM traefik:3.6.4

From 9bc7b7ce8c6bb651f0b264db435ece5d111f88d8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Dec 2025 13:10:37 +0000
Subject: [PATCH 264/427] chore(deps): bump golang.org/x/sync in
 /plugins/scheduler-k3s

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.18.0 to 0.19.0.
- [Commits](https://github.com/golang/sync/compare/v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index f12552efe..ceba5b145 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	github.com/traefik/traefik/v2 v2.11.32
-	golang.org/x/sync v0.18.0
+	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.2
 	k8s.io/api v0.34.2
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 26490a17a..2338f968d 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -456,8 +456,8 @@ golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=

From 315e4956944545351328da1a79a74c7d741dce2d Mon Sep 17 00:00:00 2001
From: Dean Marano <here@dean.is>
Date: Mon, 8 Dec 2025 12:57:57 -0500
Subject: [PATCH 265/427] Add DNS plugin to community plugins list

---
 docs/community/plugins.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/community/plugins.md b/docs/community/plugins.md
index cf6ce1d69..cfb664937 100644
--- a/docs/community/plugins.md
+++ b/docs/community/plugins.md
@@ -113,6 +113,7 @@ The following plugins are available and provided by Dokku maintainers.  Please f
 | [APT](https://github.com/dokku-community/dokku-apt)                                               | [dokku-community][]   | 0.18.x+               |
 | [Auto Sync](https://github.com/IdeaSynthesis/dokku-autosync)<sup>1</sup>                          | [fomojola][]          | 0.8.1+                |
 | [Deploy Webhook](https://github.com/IdeaSynthesis/dokku-deploy-webhook)<sup>2</sup>               | [fomojola][]          | 0.8.1+                |
+| [DNS](https://github.com/deanmarano/dokku-dns)                                                    | [deanmarano][]        | 0.31.0+               |
 | [Docker auto persist volumes](https://github.com/Flink/dokku-docker-auto-volumes)                 | [flink][]             | 0.4.0+                |
 | [Docker Direct](https://github.com/dokku-community/dokku-docker-direct)                           | [josegonzalez][]      | 0.4.0+                |
 | [Dokku Clone](https://github.com/crisward/dokku-clone)                                            | [crisward][]          | 0.4.0+                |

From 0f78321dbe5f7339c073c91af4db02da83bd8ed6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 13:06:44 +0000
Subject: [PATCH 266/427] chore(deps): bump github.com/onsi/gomega in
 /plugins/config

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.2 to 1.38.3.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.2...v1.38.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/config/go.mod | 2 +-
 plugins/config/go.sum | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugins/config/go.mod b/plugins/config/go.mod
index eb8240143..3e39acd60 100644
--- a/plugins/config/go.mod
+++ b/plugins/config/go.mod
@@ -5,7 +5,7 @@ go 1.25.1
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/joho/godotenv v1.2.0
-	github.com/onsi/gomega v1.38.2
+	github.com/onsi/gomega v1.38.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 )
diff --git a/plugins/config/go.sum b/plugins/config/go.sum
index 3b3ded9af..8cb15c311 100644
--- a/plugins/config/go.sum
+++ b/plugins/config/go.sum
@@ -29,10 +29,10 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/ginkgo/v2 v2.25.1 h1:Fwp6crTREKM+oA6Cz4MsO8RhKQzs2/gOIVOUscMAfZY=
-github.com/onsi/ginkgo/v2 v2.25.1/go.mod h1:ppTWQ1dh9KM/F1XgpeRqelR+zHVwV81DGRSDnFxK7Sk=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
+github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=

From fa5460003288b0556e3db1884377cdb3971b36a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 13:11:17 +0000
Subject: [PATCH 267/427] chore(deps): bump github.com/kedacore/keda/v2 in
 /plugins/scheduler-k3s

Bumps [github.com/kedacore/keda/v2](https://github.com/kedacore/keda) from 2.18.1 to 2.18.2.
- [Release notes](https://github.com/kedacore/keda/releases)
- [Changelog](https://github.com/kedacore/keda/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kedacore/keda/compare/v2.18.1...v2.18.2)

---
updated-dependencies:
- dependency-name: github.com/kedacore/keda/v2
  dependency-version: 2.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 24 ++++++------
 plugins/scheduler-k3s/go.sum | 72 ++++++++++++++++++------------------
 2 files changed, 47 insertions(+), 49 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index ceba5b145..99551def7 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/scheduler-k3s
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/Masterminds/semver/v3 v3.4.0
@@ -19,7 +19,7 @@ require (
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
-	github.com/kedacore/keda/v2 v2.18.1
+	github.com/kedacore/keda/v2 v2.18.2
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	github.com/traefik/traefik/v2 v2.11.32
@@ -69,7 +69,7 @@ require (
 	github.com/go-acme/lego/v4 v4.25.2 // indirect
 	github.com/go-errors/errors v1.5.1 // indirect
 	github.com/go-gorp/gorp/v3 v3.1.0 // indirect
-	github.com/go-jose/go-jose/v4 v4.1.1 // indirect
+	github.com/go-jose/go-jose/v4 v4.1.3 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-openapi/jsonreference v0.21.2 // indirect
 	github.com/go-openapi/swag v0.23.1 // indirect
@@ -93,7 +93,7 @@ require (
 	github.com/joho/godotenv v1.5.1 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.18.0 // indirect
+	github.com/klauspost/compress v1.18.1 // indirect
 	github.com/kr/fs v0.1.0 // indirect
 	github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
 	github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
@@ -142,21 +142,21 @@ require (
 	github.com/traefik/paerser v0.2.2 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
-	go.yaml.in/yaml/v2 v2.4.2 // indirect
+	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/mod v0.29.0 // indirect
+	golang.org/x/mod v0.30.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/oauth2 v0.31.0 // indirect
+	golang.org/x/oauth2 v0.33.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 	golang.org/x/term v0.37.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
-	golang.org/x/time v0.13.0 // indirect
-	golang.org/x/tools v0.38.0 // indirect
+	golang.org/x/time v0.14.0 // indirect
+	golang.org/x/tools v0.39.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250929231259-57b25ae835d4 // indirect
-	google.golang.org/grpc v1.75.1 // indirect
-	google.golang.org/protobuf v1.36.9 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846 // indirect
+	google.golang.org/grpc v1.77.0-dev // indirect
+	google.golang.org/protobuf v1.36.10 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	k8s.io/apiextensions-apiserver v0.34.2 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2338f968d..c8b698588 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -107,8 +107,8 @@ github.com/go-errors/errors v1.5.1 h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8b
 github.com/go-errors/errors v1.5.1/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og=
 github.com/go-gorp/gorp/v3 v3.1.0 h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs=
 github.com/go-gorp/gorp/v3 v3.1.0/go.mod h1:dLEjIyyRNiXvNZ8PSmzpt1GsWAUK8kjVhEpjH8TixEw=
-github.com/go-jose/go-jose/v4 v4.1.1 h1:JYhSgy4mXXzAdF3nUx3ygx347LRXJRrpgyU3adRmkAI=
-github.com/go-jose/go-jose/v4 v4.1.1/go.mod h1:BdsZGqgdO3b6tTc6LSE56wcDbMMLuPsw5d4ZD5f94kA=
+github.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs=
+github.com/go-jose/go-jose/v4 v4.1.3/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
 github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
 github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
@@ -170,8 +170,8 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY=
 github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo=
 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA=
 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 h1:X5VWvz21y3gzm9Nw/kaUeku/1+uBhcekkmy4IkffJww=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1/go.mod h1:Zanoh4+gvIgluNqcfMVTJueD4wSS5hT7zTt4Mrutd90=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 h1:8Tjv8EJ+pM1xP8mK6egEbD1OgnVTyacbefKhmbLhIhU=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2/go.mod h1:pkJQ2tZHJ0aFOVEEot6oZmaVEZcRme73eIFmhiVuRWs=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
@@ -196,12 +196,12 @@ github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnr
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
-github.com/kedacore/keda/v2 v2.18.1 h1:h6bRt/IOxxtZpJlHSqhdH/lcInH7Z9obxg/JvWOmGAw=
-github.com/kedacore/keda/v2 v2.18.1/go.mod h1:gCYj1eF0aIy4aSlGgImeydgueBP2ThZMS1wkbRLfiW4=
+github.com/kedacore/keda/v2 v2.18.2 h1:xId4U0vycfOPNrjsuLcdmyMfaiNkACs9B7csTaq0nL4=
+github.com/kedacore/keda/v2 v2.18.2/go.mod h1:gaFzDtqtXg6KPmMcwzeCjv7aoK8Z1I2NaUkqHkREbDk=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
-github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
-github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
+github.com/klauspost/compress v1.18.1 h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co=
+github.com/klauspost/compress v1.18.1/go.mod h1:ZQFFVG+MdnR0P+l6wpXgIL4NTtwiKIdBnrBd8Nrxr+0=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
@@ -257,8 +257,8 @@ github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8m
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
 github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
-github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
-github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
+github.com/onsi/ginkgo/v2 v2.27.2 h1:LzwLj0b89qtIy6SSASkzlNvX6WktqurSHwkk2ipF/Ns=
+github.com/onsi/ginkgo/v2 v2.27.2/go.mod h1:ArE1D/XhNXBXCBkKOLkbsb2c81dQHCRcF5zwn/ykDRo=
 github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
 github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
@@ -297,8 +297,8 @@ github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5 h1:EaDatTxkdHG+U3Bk4EUr+DZ7fO
 github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5/go.mod h1:fyalQWdtzDBECAQFBJuQe5bzQ02jGd5Qcbgb97Flm7U=
 github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb27yVE+gIAfeqp8LUCc=
 github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ=
-github.com/redis/go-redis/v9 v9.14.0 h1:u4tNCjXOyzfgeLN+vAZaW1xUooqWDqVEsZN0U01jfAE=
-github.com/redis/go-redis/v9 v9.14.0/go.mod h1:huWgSWd8mW6+m0VPhJjSSQ+d6Nh1VICQ6Q5lHuCH/Iw=
+github.com/redis/go-redis/v9 v9.17.2 h1:P2EGsA4qVIM3Pp+aPocCJ7DguDHhqrXNhVcEp4ViluI=
+github.com/redis/go-redis/v9 v9.17.2/go.mod h1:u410H11HMLoB+TP67dz8rL9s6QW2j76l0//kSOd3370=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
 github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
@@ -396,18 +396,16 @@ go.opentelemetry.io/otel/sdk/metric v1.37.0 h1:90lI228XrB9jCMuSdA0673aubgRobVZFh
 go.opentelemetry.io/otel/sdk/metric v1.37.0/go.mod h1:cNen4ZWfiD37l5NhS+Keb5RXVWZWpRE+9WyVCpbo5ps=
 go.opentelemetry.io/otel/trace v1.37.0 h1:HLdcFNbRQBE2imdSEgm/kwqmQj1Or1l/7bW6mxVK7z4=
 go.opentelemetry.io/otel/trace v1.37.0/go.mod h1:TlgrlQ+PtQO5XFerSPUYG0JSgGyryXewPGyayAWSBS0=
-go.opentelemetry.io/proto/otlp v1.7.0 h1:jX1VolD6nHuFzOYso2E73H85i92Mv8JQYk0K9vz09os=
-go.opentelemetry.io/proto/otlp v1.7.0/go.mod h1:fSKjH6YJ7HDlwzltzyMj036AJ3ejJLCgCSHGj4efDDo=
-go.uber.org/automaxprocs v1.6.0 h1:O3y2/QNTOdbF+e/dpXNNW7Rx2hZ4sTIPyybbxyNqTUs=
-go.uber.org/automaxprocs v1.6.0/go.mod h1:ifeIMSnPZuznNm6jmdzmU3/bfk01Fe2fotchwEFJ8r8=
+go.opentelemetry.io/proto/otlp v1.7.1 h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4=
+go.opentelemetry.io/proto/otlp v1.7.1/go.mod h1:b2rVh6rfI/s2pHWNlB7ILJcRALpcNDzKhACevjI+ZnE=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
-go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
-go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
-go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
-go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
+go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
+go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
+go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
@@ -429,8 +427,8 @@ golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.29.0 h1:HV8lRxZC4l2cr3Zq1LvtOsi/ThTgWnUk/y64QSs8GwA=
-golang.org/x/mod v0.29.0/go.mod h1:NyhrlYXJ2H4eJiRy/WDBO6HMqZQ6q9nk4JzS3NuCK+w=
+golang.org/x/mod v0.30.0 h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk=
+golang.org/x/mod v0.30.0/go.mod h1:lAsf5O2EvJeSFMiBxXDki7sCgAxEUcZHXoXMKT4GJKc=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
@@ -445,8 +443,8 @@ golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
-golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo=
-golang.org/x/oauth2 v0.31.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
+golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -501,8 +499,8 @@ golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
 golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
 golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
-golang.org/x/time v0.13.0 h1:eUlYslOIt32DgYD6utsuUeHs4d7AsEYLuIAdg7FlYgI=
-golang.org/x/time v0.13.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
+golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
+golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
@@ -511,23 +509,23 @@ golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
-golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
-golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
+golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
 gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
-google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb h1:ITgPrl429bc6+2ZraNSzMDk3I95nmQln2fuPstKwFDE=
-google.golang.org/genproto/googleapis/api v0.0.0-20250721164621-a45f3dfb1074 h1:mVXdvnmR3S3BQOqHECm9NGMjYiRtEvDYcqAqedTXY6s=
-google.golang.org/genproto/googleapis/api v0.0.0-20250721164621-a45f3dfb1074/go.mod h1:vYFwMYFbmA8vl6Z/krj/h7+U/AqpHknwJX4Uqgfyc7I=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20250929231259-57b25ae835d4 h1:i8QOKZfYg6AbGVZzUAY3LrNWCKF8O6zFisU9Wl9RER4=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20250929231259-57b25ae835d4/go.mod h1:HSkG/KdJWusxU1F6CNrwNDjBMgisKxGnc5dAZfT0mjQ=
-google.golang.org/grpc v1.75.1 h1:/ODCNEuf9VghjgO3rqLcfg8fiOP0nSluljWFlDxELLI=
-google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ=
-google.golang.org/protobuf v1.36.9 h1:w2gp2mA27hUeUzj9Ex9FBjsBm40zfaDtEWow293U7Iw=
-google.golang.org/protobuf v1.36.9/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU=
+google.golang.org/genproto v0.0.0-20250505200425-f936aa4a68b2 h1:1tXaIXCracvtsRxSBsYDiSBN0cuJvM7QYW+MrpIRY78=
+google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4=
+google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846 h1:Wgl1rcDNThT+Zn47YyCXOXyX/COgMTIdhJ717F0l4xk=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
+google.golang.org/grpc v1.77.0-dev h1:/vIEHfMKhSrLA4blIq5Oa1XfhGgpOpBzznu93bjFieQ=
+google.golang.org/grpc v1.77.0-dev/go.mod h1:Ju12QI8M6iQJtbcsV+awF5a4hfJMLi4X0JLo94ULZ6c=
+google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE=
+google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=

From eab02b8b06ad4e0bb1558c1deb862c0266d79de6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 13:11:26 +0000
Subject: [PATCH 268/427] chore(deps): bump github.com/go-openapi/jsonpointer

Bumps [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) from 0.22.3 to 0.22.4.
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](https://github.com/go-openapi/jsonpointer/compare/v0.22.3...v0.22.4)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 4 ++--
 plugins/scheduler-k3s/go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index ceba5b145..e71243831 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -14,7 +14,7 @@ require (
 	github.com/dokku/dokku/plugins/nginx-vhosts v0.0.0-20250618161309-8d0c35f1333c
 	github.com/fatih/color v1.18.0
 	github.com/fluxcd/pkg/kustomize v1.24.0
-	github.com/go-openapi/jsonpointer v0.22.3
+	github.com/go-openapi/jsonpointer v0.22.4
 	github.com/go-resty/resty/v2 v2.17.0
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
@@ -73,7 +73,7 @@ require (
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-openapi/jsonreference v0.21.2 // indirect
 	github.com/go-openapi/swag v0.23.1 // indirect
-	github.com/go-openapi/swag/jsonname v0.25.1 // indirect
+	github.com/go-openapi/swag/jsonname v0.25.4 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/btree v1.1.3 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2338f968d..328701cf4 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -115,14 +115,14 @@ github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ=
 github.com/go-logr/zapr v1.3.0/go.mod h1:YKepepNBd1u/oyhd/yQmtjVXmm9uML4IXUgMOwR8/Gg=
-github.com/go-openapi/jsonpointer v0.22.3 h1:dKMwfV4fmt6Ah90zloTbUKWMD+0he+12XYAsPotrkn8=
-github.com/go-openapi/jsonpointer v0.22.3/go.mod h1:0lBbqeRsQ5lIanv3LHZBrmRGHLHcQoOXQnf88fHlGWo=
+github.com/go-openapi/jsonpointer v0.22.4 h1:dZtK82WlNpVLDW2jlA1YCiVJFVqkED1MegOUy9kR5T4=
+github.com/go-openapi/jsonpointer v0.22.4/go.mod h1:elX9+UgznpFhgBuaMQ7iu4lvvX1nvNsesQ3oxmYTw80=
 github.com/go-openapi/jsonreference v0.21.2 h1:Wxjda4M/BBQllegefXrY/9aq1fxBA8sI5M/lFU6tSWU=
 github.com/go-openapi/jsonreference v0.21.2/go.mod h1:pp3PEjIsJ9CZDGCNOyXIQxsNuroxm8FAJ/+quA0yKzQ=
 github.com/go-openapi/swag v0.23.1 h1:lpsStH0n2ittzTnbaSloVZLuB5+fvSY/+hnagBjSNZU=
 github.com/go-openapi/swag v0.23.1/go.mod h1:STZs8TbRvEQQKUA+JZNAm3EWlgaOBGpyFDqQnDHMef0=
-github.com/go-openapi/swag/jsonname v0.25.1 h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU=
-github.com/go-openapi/swag/jsonname v0.25.1/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
+github.com/go-openapi/swag/jsonname v0.25.4 h1:bZH0+MsS03MbnwBXYhuTttMOqk+5KcQ9869Vye1bNHI=
+github.com/go-openapi/swag/jsonname v0.25.4/go.mod h1:GPVEk9CWVhNvWhZgrnvRA6utbAltopbKwDu8mXNUMag=
 github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6Ub6wls=
 github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=

From 078ba2e81f8cdd838f6a1eff46e81c745e5e3d3a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 10 Dec 2025 13:06:16 +0000
Subject: [PATCH 269/427] chore(deps): bump golang.org/x/sync in
 /plugins/common

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.18.0 to 0.19.0.
- [Commits](https://github.com/golang/sync/compare/v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/common/go.mod | 2 +-
 plugins/common/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/common/go.mod b/plugins/common/go.mod
index a15854d3f..a14ec6e14 100644
--- a/plugins/common/go.mod
+++ b/plugins/common/go.mod
@@ -12,7 +12,7 @@ require (
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	golang.org/x/crypto v0.45.0
-	golang.org/x/sync v0.18.0
+	golang.org/x/sync v0.19.0
 )
 
 require (
diff --git a/plugins/common/go.sum b/plugins/common/go.sum
index be0aeee97..dffcbc6a2 100644
--- a/plugins/common/go.sum
+++ b/plugins/common/go.sum
@@ -69,8 +69,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=

From 8892da1a7f470cdd85afc1608f247e5befc8230f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 12 Dec 2025 05:41:35 -0500
Subject: [PATCH 270/427] chore: bump go modules and run go mod tidy

---
 common.mk                                    | 2 +-
 go.work                                      | 2 +-
 plugins/app-json/go.mod                      | 4 ++--
 plugins/app-json/go.sum                      | 4 ++--
 plugins/apps/go.mod                          | 4 ++--
 plugins/apps/go.sum                          | 4 ++--
 plugins/builder/go.mod                       | 4 ++--
 plugins/builder/go.sum                       | 4 ++--
 plugins/buildpacks/go.mod                    | 4 ++--
 plugins/buildpacks/go.sum                    | 4 ++--
 plugins/common/go.mod                        | 2 +-
 plugins/config/go.mod                        | 4 ++--
 plugins/config/go.sum                        | 4 ++--
 plugins/cron/go.mod                          | 4 ++--
 plugins/cron/go.sum                          | 4 ++--
 plugins/docker-options/go.mod                | 4 ++--
 plugins/docker-options/go.sum                | 4 ++--
 plugins/logs/go.mod                          | 4 ++--
 plugins/logs/go.sum                          | 4 ++--
 plugins/network/go.mod                       | 4 ++--
 plugins/network/go.sum                       | 4 ++--
 plugins/nginx-vhosts/go.mod                  | 4 ++--
 plugins/nginx-vhosts/go.sum                  | 4 ++--
 plugins/ports/go.mod                         | 4 ++--
 plugins/ports/go.sum                         | 8 ++++----
 plugins/proxy/go.mod                         | 4 ++--
 plugins/proxy/go.sum                         | 8 ++++----
 plugins/ps/go.mod                            | 4 ++--
 plugins/ps/go.sum                            | 8 ++++----
 plugins/registry/go.mod                      | 4 ++--
 plugins/registry/go.sum                      | 4 ++--
 plugins/repo/go.mod                          | 4 ++--
 plugins/repo/go.sum                          | 4 ++--
 plugins/resource/go.mod                      | 4 ++--
 plugins/resource/go.sum                      | 4 ++--
 plugins/scheduler-docker-local/go.mod        | 2 +-
 plugins/scheduler-k3s/go.sum                 | 4 ++--
 plugins/scheduler/go.mod                     | 4 ++--
 plugins/scheduler/go.sum                     | 4 ++--
 tests/apps/gogrpc/go.mod                     | 2 +-
 tests/apps/zombies-buildpack/go.mod          | 2 +-
 tests/apps/zombies-dockerfile-no-tini/go.mod | 2 +-
 tests/apps/zombies-dockerfile-tini/go.mod    | 2 +-
 43 files changed, 84 insertions(+), 84 deletions(-)

diff --git a/common.mk b/common.mk
index 42220cc94..a5dc687d9 100644
--- a/common.mk
+++ b/common.mk
@@ -1,7 +1,7 @@
 GO_ARGS ?=
 GO_PLUGIN_MAKE_TARGET ?= build
 GO_REPO_ROOT := /go/src/github.com/dokku/dokku
-BUILD_IMAGE := golang:1.25.1
+BUILD_IMAGE := golang:1.25.5
 GO_BUILD_CACHE ?= /tmp/dokku-go-build-cache
 GO_MOD_CACHE   ?= /tmp/dokku-go-mod-mod
 GO_ROOT_MOUNT  ?= $$PWD/../..:$(GO_REPO_ROOT)
diff --git a/go.work b/go.work
index 12736855c..42c43feaf 100644
--- a/go.work
+++ b/go.work
@@ -1,4 +1,4 @@
-go 1.25.1
+go 1.25.5
 
 use (
 	./plugins/app-json
diff --git a/plugins/app-json/go.mod b/plugins/app-json/go.mod
index bdc6c3ea2..396e6a916 100644
--- a/plugins/app-json/go.mod
+++ b/plugins/app-json/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/app-json
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -26,7 +26,7 @@ require (
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	github.com/stretchr/testify v1.8.4 // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index b16ac18a5..3dda94922 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -63,8 +63,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/apps/go.mod b/plugins/apps/go.mod
index 72a0d5103..007d8ce43 100644
--- a/plugins/apps/go.mod
+++ b/plugins/apps/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/apps
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/apps/go.sum b/plugins/apps/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/apps/go.sum
+++ b/plugins/apps/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/builder/go.mod b/plugins/builder/go.mod
index 680ca339b..3d6dafb44 100644
--- a/plugins/builder/go.mod
+++ b/plugins/builder/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/builder
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/builder/go.sum b/plugins/builder/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/builder/go.sum
+++ b/plugins/builder/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/buildpacks/go.mod b/plugins/buildpacks/go.mod
index bb63268ed..6ea7d8b50 100644
--- a/plugins/buildpacks/go.mod
+++ b/plugins/buildpacks/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/buildpacks
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/buildpacks/go.sum b/plugins/buildpacks/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/buildpacks/go.sum
+++ b/plugins/buildpacks/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/common/go.mod b/plugins/common/go.mod
index a14ec6e14..d128bee5d 100644
--- a/plugins/common/go.mod
+++ b/plugins/common/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/common
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/alexellis/go-execute/v2 v2.2.1
diff --git a/plugins/config/go.mod b/plugins/config/go.mod
index 3e39acd60..d6fbe3624 100644
--- a/plugins/config/go.mod
+++ b/plugins/config/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/config
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -27,7 +27,7 @@ require (
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.45.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 )
diff --git a/plugins/config/go.sum b/plugins/config/go.sum
index 8cb15c311..3c74104cf 100644
--- a/plugins/config/go.sum
+++ b/plugins/config/go.sum
@@ -71,8 +71,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/cron/go.mod b/plugins/cron/go.mod
index bb5b74126..635f15fae 100644
--- a/plugins/cron/go.mod
+++ b/plugins/cron/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/cron
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/app-json v0.0.0-00010101000000-000000000000
@@ -28,7 +28,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
 )
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index 1872506eb..c0206198c 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -75,8 +75,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/docker-options/go.mod b/plugins/docker-options/go.mod
index 9a2944220..f59b7a584 100644
--- a/plugins/docker-options/go.mod
+++ b/plugins/docker-options/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/docker-options
 
-go 1.25.1
+go 1.25.5
 
 require github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 
@@ -19,7 +19,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/docker-options/go.sum b/plugins/docker-options/go.sum
index 0bafcc939..c735b7d4b 100644
--- a/plugins/docker-options/go.sum
+++ b/plugins/docker-options/go.sum
@@ -55,8 +55,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/logs/go.mod b/plugins/logs/go.mod
index 1640e80b0..1608bb25d 100644
--- a/plugins/logs/go.mod
+++ b/plugins/logs/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/logs
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -24,7 +24,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/logs/go.sum b/plugins/logs/go.sum
index 5307e963b..10c2b2cc4 100644
--- a/plugins/logs/go.sum
+++ b/plugins/logs/go.sum
@@ -59,8 +59,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/network/go.mod b/plugins/network/go.mod
index 244eeaf96..29f548458 100644
--- a/plugins/network/go.mod
+++ b/plugins/network/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/network
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/network/go.sum b/plugins/network/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/network/go.sum
+++ b/plugins/network/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/nginx-vhosts/go.mod b/plugins/nginx-vhosts/go.mod
index 78af20eeb..192195d8f 100644
--- a/plugins/nginx-vhosts/go.mod
+++ b/plugins/nginx-vhosts/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/nginx-vhosts
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/nginx-vhosts/go.sum b/plugins/nginx-vhosts/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/nginx-vhosts/go.sum
+++ b/plugins/nginx-vhosts/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/ports/go.mod b/plugins/ports/go.mod
index 40a9e8541..d9a1f5f98 100644
--- a/plugins/ports/go.mod
+++ b/plugins/ports/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/ports
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -24,7 +24,7 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/ports/go.sum b/plugins/ports/go.sum
index 08c69bc02..47d05d752 100644
--- a/plugins/ports/go.sum
+++ b/plugins/ports/go.sum
@@ -21,8 +21,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
@@ -59,8 +59,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/proxy/go.mod b/plugins/proxy/go.mod
index 8ce408199..41f4f22a5 100644
--- a/plugins/proxy/go.mod
+++ b/plugins/proxy/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/proxy
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -24,7 +24,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/proxy/go.sum b/plugins/proxy/go.sum
index 08c69bc02..47d05d752 100644
--- a/plugins/proxy/go.sum
+++ b/plugins/proxy/go.sum
@@ -21,8 +21,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
@@ -59,8 +59,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/ps/go.mod b/plugins/ps/go.mod
index a5d216196..fa78b2fa7 100644
--- a/plugins/ps/go.mod
+++ b/plugins/ps/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/ps
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -26,7 +26,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/ps/go.sum b/plugins/ps/go.sum
index 90902860d..ab551d869 100644
--- a/plugins/ps/go.sum
+++ b/plugins/ps/go.sum
@@ -24,8 +24,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
@@ -63,8 +63,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/registry/go.mod b/plugins/registry/go.mod
index bff280aec..a8958d69c 100644
--- a/plugins/registry/go.mod
+++ b/plugins/registry/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/registry
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/registry/go.sum b/plugins/registry/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/registry/go.sum
+++ b/plugins/registry/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/repo/go.mod b/plugins/repo/go.mod
index c6c205b32..dbb8e4ccd 100644
--- a/plugins/repo/go.mod
+++ b/plugins/repo/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/repo
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/repo/go.sum b/plugins/repo/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/repo/go.sum
+++ b/plugins/repo/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/resource/go.mod b/plugins/resource/go.mod
index 5e3ea2d21..ee6c73e11 100644
--- a/plugins/resource/go.mod
+++ b/plugins/resource/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/resource
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/resource/go.sum b/plugins/resource/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/resource/go.sum
+++ b/plugins/resource/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/plugins/scheduler-docker-local/go.mod b/plugins/scheduler-docker-local/go.mod
index 30855082f..ac71c3ada 100644
--- a/plugins/scheduler-docker-local/go.mod
+++ b/plugins/scheduler-docker-local/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/scheduler-docker-local
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 73c22e087..f5888bc6b 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -259,8 +259,8 @@ github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+
 github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
 github.com/onsi/ginkgo/v2 v2.27.2 h1:LzwLj0b89qtIy6SSASkzlNvX6WktqurSHwkk2ipF/Ns=
 github.com/onsi/ginkgo/v2 v2.27.2/go.mod h1:ArE1D/XhNXBXCBkKOLkbsb2c81dQHCRcF5zwn/ykDRo=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
diff --git a/plugins/scheduler/go.mod b/plugins/scheduler/go.mod
index 3047b7cd2..5c518fdfa 100644
--- a/plugins/scheduler/go.mod
+++ b/plugins/scheduler/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokku/plugins/scheduler
 
-go 1.25.1
+go 1.25.5
 
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 )
 
diff --git a/plugins/scheduler/go.sum b/plugins/scheduler/go.sum
index b7e13e975..3a6bdc6b9 100644
--- a/plugins/scheduler/go.sum
+++ b/plugins/scheduler/go.sum
@@ -57,8 +57,8 @@ golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
diff --git a/tests/apps/gogrpc/go.mod b/tests/apps/gogrpc/go.mod
index d4e38a97a..e2c085169 100644
--- a/tests/apps/gogrpc/go.mod
+++ b/tests/apps/gogrpc/go.mod
@@ -1,6 +1,6 @@
 module github.com/dokku/dokko/tests/apps/gorpc
 
-go 1.25.1
+go 1.25.5
 
 require (
 	golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82 // indirect
diff --git a/tests/apps/zombies-buildpack/go.mod b/tests/apps/zombies-buildpack/go.mod
index c56c8785f..004931b31 100644
--- a/tests/apps/zombies-buildpack/go.mod
+++ b/tests/apps/zombies-buildpack/go.mod
@@ -1,3 +1,3 @@
 module dokku.me/web
 
-go 1.25.1
+go 1.25.5
diff --git a/tests/apps/zombies-dockerfile-no-tini/go.mod b/tests/apps/zombies-dockerfile-no-tini/go.mod
index c56c8785f..004931b31 100644
--- a/tests/apps/zombies-dockerfile-no-tini/go.mod
+++ b/tests/apps/zombies-dockerfile-no-tini/go.mod
@@ -1,3 +1,3 @@
 module dokku.me/web
 
-go 1.25.1
+go 1.25.5
diff --git a/tests/apps/zombies-dockerfile-tini/go.mod b/tests/apps/zombies-dockerfile-tini/go.mod
index c56c8785f..004931b31 100644
--- a/tests/apps/zombies-dockerfile-tini/go.mod
+++ b/tests/apps/zombies-dockerfile-tini/go.mod
@@ -1,3 +1,3 @@
 module dokku.me/web
 
-go 1.25.1
+go 1.25.5

From f0dfcb8c914769ba9f1e85e7cbaf01c6489a2e43 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 12 Dec 2025 13:01:41 +0000
Subject: [PATCH 271/427] chore(deps): bump google.golang.org/protobuf in
 /tests/apps/gogrpc

Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/go.mod | 2 +-
 tests/apps/gogrpc/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/gogrpc/go.mod b/tests/apps/gogrpc/go.mod
index d4e38a97a..25ea163f5 100644
--- a/tests/apps/gogrpc/go.mod
+++ b/tests/apps/gogrpc/go.mod
@@ -11,7 +11,7 @@ require (
 
 require (
 	google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236
-	google.golang.org/protobuf v1.36.10
+	google.golang.org/protobuf v1.36.11
 )
 
 require google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 // indirect
diff --git a/tests/apps/gogrpc/go.sum b/tests/apps/gogrpc/go.sum
index 5f3decae8..f11c118cf 100644
--- a/tests/apps/gogrpc/go.sum
+++ b/tests/apps/gogrpc/go.sum
@@ -34,5 +34,5 @@ google.golang.org/grpc v1.77.0 h1:wVVY6/8cGA6vvffn+wWK5ToddbgdU3d8MNENr4evgXM=
 google.golang.org/grpc v1.77.0/go.mod h1:z0BY1iVj0q8E1uSQCjL9cppRj+gnZjzDnzV0dHhrNig=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236 h1:wTUkwrodi4IuWD3kYkMUwCU8BhwFaqDywrXmsthCvQA=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236/go.mod h1:j5uROIAAgi3YmtiETMt1LW0d/lHqQ7wwrIY4uGRXLQ4=
-google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE=
-google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
+google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
+google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=

From e9f2d3d78c2e42262da8c2d951184fb92596243a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 12 Dec 2025 13:06:16 +0000
Subject: [PATCH 272/427] chore(deps): bump pymdown-extensions from 10.18 to
 10.19 in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.18 to 10.19.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.18...10.19)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: '10.19'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 68d2e80bd..914b5a561 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.0
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
-pymdown-extensions==10.18
+pymdown-extensions==10.19
 pyparsing==3.2.5
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From 1127286c966d352ce3e191e1a059ace0e5d1ef6b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 13:04:21 +0000
Subject: [PATCH 273/427] chore(deps): bump actions/download-artifact from 6 to
 7

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5c49cbe07..e35819558 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -120,7 +120,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: download packages
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: build
           path: build
@@ -159,7 +159,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: download packages
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: build
           path: build
@@ -193,7 +193,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: download packages
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: build
           path: build
@@ -230,7 +230,7 @@ jobs:
 
     steps:
       - name: download test-results
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           path: test-results
 

From 90117e6aa0ff91ba029bb058252000bce4ee32bd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 13:04:26 +0000
Subject: [PATCH 274/427] chore(deps): bump actions/upload-artifact from 5 to 6

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml      | 6 +++---
 .github/workflows/release.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5c49cbe07..86ad16350 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
           echo "matrix=$json" >> $GITHUB_OUTPUT
 
       - name: upload packages
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: build
           path: build
@@ -143,7 +143,7 @@ jobs:
           SYNC_GITHUB_PASSWORD: ${{ secrets.SYNC_GITHUB_PASSWORD }}
           SYNC_GITHUB_USERNAME: ${{ secrets.SYNC_GITHUB_USERNAME }}
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: test-results-${{ matrix.index }}
           path: test-results
@@ -214,7 +214,7 @@ jobs:
             2) sudo -E make -e deploy-test-multi ;;
             3) sudo -E make -e deploy-test-go-fail-predeploy deploy-test-go-fail-postdeploy ;;
           esac
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: coverage.${{ matrix.index }}
           path: test-results/coverage
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4e59acbb2..1ed1a4c9e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,7 +73,7 @@ jobs:
         run: echo "version=$(cat build/next-version)" >> $GITHUB_OUTPUT
 
       - name: upload packages
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: build
           path: build
@@ -109,7 +109,7 @@ jobs:
           PKR_VAR_dokku_version="${VERSION:1}" make image/build/digitalocean
 
       - name: upload packages
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: digitalocean-manifest.json
           path: digitalocean-manifest.json

From 18b4553a1fcd1c5277dd1d431193eebd35732d72 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 13:07:27 +0000
Subject: [PATCH 275/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.19 to 10.19.1.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.19...10.19.1)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 10.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 914b5a561..1b105270e 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.0
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
-pymdown-extensions==10.19
+pymdown-extensions==10.19.1
 pyparsing==3.2.5
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From fc90bb596a90a905a49465e56192713079dca45c Mon Sep 17 00:00:00 2001
From: Dean Marano <here@dean.is>
Date: Mon, 15 Dec 2025 14:50:14 -0500
Subject: [PATCH 276/427] Add deanmarano to community plugins list

I added a link to my name when adding my DNS plugin, but I did not give that link a destination.
---
 docs/community/plugins.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/community/plugins.md b/docs/community/plugins.md
index cfb664937..4d39680db 100644
--- a/docs/community/plugins.md
+++ b/docs/community/plugins.md
@@ -271,6 +271,7 @@ The following plugins are no longer maintained by their developers.
 [crisward]: https://github.com/crisward
 [cu12]: https://github.com/cu12
 [darkpixel]: https://github.com/darkpixel
+[deanmarano]: https://github.com/deanmarano
 [dokku]: https://github.com/dokku
 [dokku-community]: https://github.com/dokku-community
 [dyson]: https://github.com/dyson

From 9a35275c26645a702566e0430e5d6b701ee67f32 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Dec 2025 13:05:13 +0000
Subject: [PATCH 277/427] chore(deps): bump python in
 /tests/apps/dockerfile-release

Bumps python from 3.14.1-bookworm to 3.14.2-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.2-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-release/Dockerfile b/tests/apps/dockerfile-release/Dockerfile
index 64556ee91..bfcd664d8 100644
--- a/tests/apps/dockerfile-release/Dockerfile
+++ b/tests/apps/dockerfile-release/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.14.1-bookworm
+FROM python:3.14.2-bookworm
 
 RUN pip install --user pipenv
 ENV PATH="${PATH}:/root/.local/bin"

From 88cfe2c3ca61fa4002af512f39d6001ed6249662 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Dec 2025 13:05:17 +0000
Subject: [PATCH 278/427] chore(deps): bump python in /docs/_build

Bumps python from 3.14.1-alpine to 3.14.2-alpine.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.2-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/Dockerfile b/docs/_build/Dockerfile
index e4f4260f6..e6be17b54 100644
--- a/docs/_build/Dockerfile
+++ b/docs/_build/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.14.1-alpine
+FROM python:3.14.2-alpine
 
 WORKDIR /usr/src/app
 

From 430fdbe5199dd6460b270f351de9ec8cc7ff8874 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Dec 2025 13:08:39 +0000
Subject: [PATCH 279/427] chore(deps): bump traefik from 3.6.4 to 3.6.5 in
 /plugins/traefik-vhosts

Bumps traefik from 3.6.4 to 3.6.5.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index 577309c38..ec7264fda 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.6.4
+FROM traefik:3.6.5

From cb5d0cfb03d7a8ac265afe208451f201f4eca53c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Dec 2025 13:08:42 +0000
Subject: [PATCH 280/427] chore(deps): bump timberio/vector in /plugins/logs

Bumps timberio/vector from 0.51.1-debian to 0.52.0-debian.

---
updated-dependencies:
- dependency-name: timberio/vector
  dependency-version: 0.52.0-debian
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/logs/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/logs/Dockerfile b/plugins/logs/Dockerfile
index a5780abbb..a8d5eefe5 100644
--- a/plugins/logs/Dockerfile
+++ b/plugins/logs/Dockerfile
@@ -1 +1 @@
-FROM timberio/vector:0.51.1-debian
+FROM timberio/vector:0.52.0-debian

From de20a395f35135a19df36213429a191182ed839f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 18 Dec 2025 13:04:57 +0000
Subject: [PATCH 281/427] chore(deps): bump ruby in
 /tests/apps/dockerfile-entrypoint

Bumps ruby from 3.4.7 to 3.4.8.

---
updated-dependencies:
- dependency-name: ruby
  dependency-version: 3.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-entrypoint/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-entrypoint/Dockerfile b/tests/apps/dockerfile-entrypoint/Dockerfile
index 6083012ee..b45a7c06a 100644
--- a/tests/apps/dockerfile-entrypoint/Dockerfile
+++ b/tests/apps/dockerfile-entrypoint/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:3.4.7
+FROM ruby:3.4.8
 
 RUN mkdir /app
 WORKDIR /app

From f9fe916aaaec2fd24e3454d5afa54ceb295fcc64 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 18 Dec 2025 13:06:09 +0000
Subject: [PATCH 282/427] chore(deps): bump mkdocs-material from 9.7.0 to 9.7.1
 in /docs/_build

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.0 to 9.7.1.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.7.0...9.7.1)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 1b105270e..8a23adc06 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -8,7 +8,7 @@ MarkupSafe==3.0.3
 mergedeep==1.3.4
 mkdocs==1.6.1
 mkdocs-exclude==1.0.2
-mkdocs-material==9.7.0
+mkdocs-material==9.7.1
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2

From 96e019e410288cf9826467e40ab4cd8294aabf33 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 13:06:51 +0000
Subject: [PATCH 283/427] chore(deps): bump soupsieve from 2.8 to 2.8.1 in
 /docs/_build

Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8 to 2.8.1.
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](https://github.com/facelessuser/soupsieve/compare/2.8...2.8.1)

---
updated-dependencies:
- dependency-name: soupsieve
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 8a23adc06..48cf4220b 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -18,6 +18,6 @@ python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 pyyaml_env_tag==1.1
 six==1.17.0
-soupsieve==2.8
+soupsieve==2.8.1
 watchdog==6.0.0
 zipp==3.23.0

From bf89577f2ea54df4e4019e2c4dc98d2d64eedf31 Mon Sep 17 00:00:00 2001
From: Kevin Leutzinger <6435727+kleutzinger@users.noreply.github.com>
Date: Fri, 19 Dec 2025 09:10:55 -0500
Subject: [PATCH 284/427] Fix command syntax for removing docker options

---
 docs/advanced-usage/docker-options.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/advanced-usage/docker-options.md b/docs/advanced-usage/docker-options.md
index 1c8664cbb..24b24a00c 100644
--- a/docs/advanced-usage/docker-options.md
+++ b/docs/advanced-usage/docker-options.md
@@ -69,7 +69,7 @@ dokku docker-options:add node-js-app deploy "--shm-size 256m"
 To remove docker options from an app, use the `docker-options:remove` command. This takes an app name, a comma-separated list of phases, and the docker-option to remove.
 
 ```shell
-dokku docker-options:remove node-js-app run ""--ulimit nofile=12"
+dokku docker-options:remove node-js-app run "--ulimit nofile=12"
 ```
 
 Multiple phases can be specified by using a comma when specifying phases:

From 1376b052f525713d9ca44a10205776702eecd8eb Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 21 Dec 2025 23:29:20 -0500
Subject: [PATCH 285/427] chore: upgrade herokuish to fix golang tests

---
 contrib/dependencies.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/contrib/dependencies.json b/contrib/dependencies.json
index 9a10d8e84..7152bc043 100644
--- a/contrib/dependencies.json
+++ b/contrib/dependencies.json
@@ -86,10 +86,10 @@
     },
     {
       "name": "herokuish",
-      "version": "0.11.5",
+      "version": "0.11.8",
       "urls": {
-        "amd64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.5/herokuish_0.11.5_linux_x86_64.tgz",
-        "arm64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.5/herokuish_0.11.5_linux_x86_64.tgz"
+        "amd64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.8/herokuish_0.11.8_linux_x86_64.tgz",
+        "arm64": "https://github.com/gliderlabs/herokuish/releases/download/v0.11.8/herokuish_0.11.8_linux_x86_64.tgz"
       }
     }
   ]

From af9feb6a1d77c43e86a9edf4fcdd71a5ab38c08c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 05:30:43 +0000
Subject: [PATCH 286/427] chore(deps): bump golang.org/x/crypto in
 /plugins/common

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/crypto/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/common/go.mod |  6 +++---
 plugins/common/go.sum | 20 ++++++++++----------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/plugins/common/go.mod b/plugins/common/go.mod
index d128bee5d..136067b36 100644
--- a/plugins/common/go.mod
+++ b/plugins/common/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/otiai10/copy v1.14.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	golang.org/x/crypto v0.45.0
+	golang.org/x/crypto v0.46.0
 	golang.org/x/sync v0.19.0
 )
 
@@ -26,7 +26,7 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
diff --git a/plugins/common/go.sum b/plugins/common/go.sum
index dffcbc6a2..2e5b9db4b 100644
--- a/plugins/common/go.sum
+++ b/plugins/common/go.sum
@@ -57,8 +57,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -81,25 +81,25 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
-golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
+golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

From c2dc3163c4878febf9b02104e921a167be5e3563 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 05:31:03 +0000
Subject: [PATCH 287/427] chore(deps): bump github.com/expr-lang/expr in
 /plugins/scheduler-k3s

Bumps [github.com/expr-lang/expr](https://github.com/expr-lang/expr) from 1.17.6 to 1.17.7.
- [Release notes](https://github.com/expr-lang/expr/releases)
- [Commits](https://github.com/expr-lang/expr/compare/v1.17.6...v1.17.7)

---
updated-dependencies:
- dependency-name: github.com/expr-lang/expr
  dependency-version: 1.17.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 81f3da0f8..258954ab3 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -62,7 +62,7 @@ require (
 	github.com/evanphx/json-patch v5.9.11+incompatible // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
-	github.com/expr-lang/expr v1.17.6 // indirect
+	github.com/expr-lang/expr v1.17.7 // indirect
 	github.com/fastfishio/qson v1.0.2 // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index f5888bc6b..26163f339 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -83,8 +83,8 @@ github.com/evanphx/json-patch/v5 v5.9.11 h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjT
 github.com/evanphx/json-patch/v5 v5.9.11/go.mod h1:3j+LviiESTElxA4p3EMKAB9HXj3/XEtnUf6OZxqIQTM=
 github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f h1:Wl78ApPPB2Wvf/TIe2xdyJxTlb6obmF18d8QdkxNDu4=
 github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f/go.mod h1:OSYXu++VVOHnXeitef/D8n/6y4QV8uLHSFXX4NeXMGc=
-github.com/expr-lang/expr v1.17.6 h1:1h6i8ONk9cexhDmowO/A64VPxHScu7qfSl2k8OlINec=
-github.com/expr-lang/expr v1.17.6/go.mod h1:8/vRC7+7HBzESEqt5kKpYXxrxkr31SaO8r40VO/1IT4=
+github.com/expr-lang/expr v1.17.7 h1:Q0xY/e/2aCIp8g9s/LGvMDCC5PxYlvHgDZRQ4y16JX8=
+github.com/expr-lang/expr v1.17.7/go.mod h1:8/vRC7+7HBzESEqt5kKpYXxrxkr31SaO8r40VO/1IT4=
 github.com/fastfishio/qson v1.0.2 h1:AY1E9RjVQ9iNPP6G9NQcEXtHXBBq204zUR0tsNFIxFY=
 github.com/fastfishio/qson v1.0.2/go.mod h1:QHBKJuWMgwEGYxdK3s1JKiRKwm5VgJx6vU3+kQa/kOU=
 github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=

From 2b3cdffccf84461c69e1353e8704f3da02fcab45 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 22 Dec 2025 00:31:48 -0500
Subject: [PATCH 288/427] chore: bump go modules and run go mod tidy

---
 plugins/app-json/go.mod               |  4 ++--
 plugins/app-json/go.sum               | 16 ++++++++--------
 plugins/apps/go.mod                   |  4 ++--
 plugins/apps/go.sum                   | 16 ++++++++--------
 plugins/builder/go.mod                |  4 ++--
 plugins/builder/go.sum                | 16 ++++++++--------
 plugins/buildpacks/go.mod             |  4 ++--
 plugins/buildpacks/go.sum             | 16 ++++++++--------
 plugins/config/go.mod                 |  6 +++---
 plugins/config/go.sum                 | 20 ++++++++++----------
 plugins/cron/go.mod                   |  4 ++--
 plugins/cron/go.sum                   | 16 ++++++++--------
 plugins/docker-options/go.mod         |  4 ++--
 plugins/docker-options/go.sum         | 16 ++++++++--------
 plugins/logs/go.mod                   |  4 ++--
 plugins/logs/go.sum                   | 16 ++++++++--------
 plugins/network/go.mod                |  4 ++--
 plugins/network/go.sum                | 16 ++++++++--------
 plugins/nginx-vhosts/go.mod           |  4 ++--
 plugins/nginx-vhosts/go.sum           | 16 ++++++++--------
 plugins/ports/go.mod                  |  4 ++--
 plugins/ports/go.sum                  | 16 ++++++++--------
 plugins/proxy/go.mod                  |  4 ++--
 plugins/proxy/go.sum                  | 16 ++++++++--------
 plugins/ps/go.mod                     |  4 ++--
 plugins/ps/go.sum                     | 16 ++++++++--------
 plugins/registry/go.mod               |  4 ++--
 plugins/registry/go.sum               | 16 ++++++++--------
 plugins/repo/go.mod                   |  4 ++--
 plugins/repo/go.sum                   | 16 ++++++++--------
 plugins/resource/go.mod               |  4 ++--
 plugins/resource/go.sum               | 16 ++++++++--------
 plugins/scheduler-docker-local/go.mod |  4 ++--
 plugins/scheduler-docker-local/go.sum | 16 ++++++++--------
 plugins/scheduler-k3s/go.mod          |  8 ++++----
 plugins/scheduler-k3s/go.sum          | 16 ++++++++--------
 plugins/scheduler/go.mod              |  4 ++--
 plugins/scheduler/go.sum              | 16 ++++++++--------
 38 files changed, 195 insertions(+), 195 deletions(-)

diff --git a/plugins/app-json/go.mod b/plugins/app-json/go.mod
index 396e6a916..d2c133f86 100644
--- a/plugins/app-json/go.mod
+++ b/plugins/app-json/go.mod
@@ -25,9 +25,9 @@ require (
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	github.com/stretchr/testify v1.8.4 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index 3dda94922..91201019a 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -51,8 +51,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -75,20 +75,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/apps/go.mod b/plugins/apps/go.mod
index 007d8ce43..0f73519f1 100644
--- a/plugins/apps/go.mod
+++ b/plugins/apps/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/apps/go.sum b/plugins/apps/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/apps/go.sum
+++ b/plugins/apps/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/builder/go.mod b/plugins/builder/go.mod
index 3d6dafb44..0d3f51608 100644
--- a/plugins/builder/go.mod
+++ b/plugins/builder/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/builder/go.sum b/plugins/builder/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/builder/go.sum
+++ b/plugins/builder/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/buildpacks/go.mod b/plugins/buildpacks/go.mod
index 6ea7d8b50..4911287f4 100644
--- a/plugins/buildpacks/go.mod
+++ b/plugins/buildpacks/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/buildpacks/go.sum b/plugins/buildpacks/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/buildpacks/go.sum
+++ b/plugins/buildpacks/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/config/go.mod b/plugins/config/go.mod
index d6fbe3624..a4cf02737 100644
--- a/plugins/config/go.mod
+++ b/plugins/config/go.mod
@@ -25,11 +25,11 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/config/go.sum b/plugins/config/go.sum
index 3c74104cf..6786f3d38 100644
--- a/plugins/config/go.sum
+++ b/plugins/config/go.sum
@@ -59,8 +59,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -83,25 +83,25 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
-golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
+golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
diff --git a/plugins/cron/go.mod b/plugins/cron/go.mod
index 635f15fae..7570e5469 100644
--- a/plugins/cron/go.mod
+++ b/plugins/cron/go.mod
@@ -27,9 +27,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
 )
 
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index c0206198c..74f7267a7 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -63,8 +63,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -87,20 +87,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/docker-options/go.mod b/plugins/docker-options/go.mod
index f59b7a584..90bb8f7e0 100644
--- a/plugins/docker-options/go.mod
+++ b/plugins/docker-options/go.mod
@@ -18,9 +18,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/docker-options/go.sum b/plugins/docker-options/go.sum
index c735b7d4b..b8154df87 100644
--- a/plugins/docker-options/go.sum
+++ b/plugins/docker-options/go.sum
@@ -43,8 +43,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -67,20 +67,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/logs/go.mod b/plugins/logs/go.mod
index 1608bb25d..922354e5c 100644
--- a/plugins/logs/go.mod
+++ b/plugins/logs/go.mod
@@ -23,9 +23,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/logs/go.sum b/plugins/logs/go.sum
index 10c2b2cc4..39157e9a3 100644
--- a/plugins/logs/go.sum
+++ b/plugins/logs/go.sum
@@ -47,8 +47,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -71,20 +71,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/network/go.mod b/plugins/network/go.mod
index 29f548458..2d6ab4ba6 100644
--- a/plugins/network/go.mod
+++ b/plugins/network/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/network/go.sum b/plugins/network/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/network/go.sum
+++ b/plugins/network/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/nginx-vhosts/go.mod b/plugins/nginx-vhosts/go.mod
index 192195d8f..a2256cb27 100644
--- a/plugins/nginx-vhosts/go.mod
+++ b/plugins/nginx-vhosts/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/nginx-vhosts/go.sum b/plugins/nginx-vhosts/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/nginx-vhosts/go.sum
+++ b/plugins/nginx-vhosts/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/ports/go.mod b/plugins/ports/go.mod
index d9a1f5f98..3bb785c23 100644
--- a/plugins/ports/go.mod
+++ b/plugins/ports/go.mod
@@ -23,9 +23,9 @@ require (
 	github.com/otiai10/mint v1.6.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/ports/go.sum b/plugins/ports/go.sum
index 47d05d752..3d1e722f4 100644
--- a/plugins/ports/go.sum
+++ b/plugins/ports/go.sum
@@ -47,8 +47,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -71,20 +71,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/proxy/go.mod b/plugins/proxy/go.mod
index 41f4f22a5..46d6ca0cc 100644
--- a/plugins/proxy/go.mod
+++ b/plugins/proxy/go.mod
@@ -23,9 +23,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/proxy/go.sum b/plugins/proxy/go.sum
index 47d05d752..3d1e722f4 100644
--- a/plugins/proxy/go.sum
+++ b/plugins/proxy/go.sum
@@ -47,8 +47,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -71,20 +71,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/ps/go.mod b/plugins/ps/go.mod
index fa78b2fa7..9924d4c69 100644
--- a/plugins/ps/go.mod
+++ b/plugins/ps/go.mod
@@ -25,9 +25,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/ps/go.sum b/plugins/ps/go.sum
index ab551d869..027de874b 100644
--- a/plugins/ps/go.sum
+++ b/plugins/ps/go.sum
@@ -51,8 +51,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -75,20 +75,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/registry/go.mod b/plugins/registry/go.mod
index a8958d69c..b70236cdf 100644
--- a/plugins/registry/go.mod
+++ b/plugins/registry/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/registry/go.sum b/plugins/registry/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/registry/go.sum
+++ b/plugins/registry/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/repo/go.mod b/plugins/repo/go.mod
index dbb8e4ccd..07bc3fc3c 100644
--- a/plugins/repo/go.mod
+++ b/plugins/repo/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/repo/go.sum b/plugins/repo/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/repo/go.sum
+++ b/plugins/repo/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/resource/go.mod b/plugins/resource/go.mod
index ee6c73e11..ac3689946 100644
--- a/plugins/resource/go.mod
+++ b/plugins/resource/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/resource/go.sum b/plugins/resource/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/resource/go.sum
+++ b/plugins/resource/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/scheduler-docker-local/go.mod b/plugins/scheduler-docker-local/go.mod
index ac71c3ada..69fff4928 100644
--- a/plugins/scheduler-docker-local/go.mod
+++ b/plugins/scheduler-docker-local/go.mod
@@ -27,8 +27,8 @@ require (
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
 	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
-	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
 	mvdan.cc/sh/v3 v3.12.0 // indirect
 )
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index 0e84c5a1f..7aa4dd2ae 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -61,8 +61,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -85,20 +85,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 81f3da0f8..53610c87a 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -144,13 +144,13 @@ require (
 	github.com/xlab/treeprint v1.2.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/mod v0.30.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/term v0.37.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
+	golang.org/x/term v0.38.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	golang.org/x/tools v0.39.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index f5888bc6b..3333e611a 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -418,8 +418,8 @@ golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliY
 golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
 golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
@@ -474,8 +474,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -485,8 +485,8 @@ golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
 golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -497,8 +497,8 @@ golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
 golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
diff --git a/plugins/scheduler/go.mod b/plugins/scheduler/go.mod
index 5c518fdfa..bfb82cdc1 100644
--- a/plugins/scheduler/go.mod
+++ b/plugins/scheduler/go.mod
@@ -21,9 +21,9 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/sftp v1.13.5 // indirect
 	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 )
 
 replace github.com/dokku/dokku/plugins/common => ../common
diff --git a/plugins/scheduler/go.sum b/plugins/scheduler/go.sum
index 3a6bdc6b9..94190c5ed 100644
--- a/plugins/scheduler/go.sum
+++ b/plugins/scheduler/go.sum
@@ -45,8 +45,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
@@ -69,20 +69,20 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=

From 5f410113ea2100888eb1f375102da0420b3beff4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 13:05:37 +0000
Subject: [PATCH 289/427] chore(deps): bump importlib-metadata from 8.7.0 to
 8.7.1 in /docs/_build

Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 8.7.0 to 8.7.1.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v8.7.0...v8.7.1)

---
updated-dependencies:
- dependency-name: importlib-metadata
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 48cf4220b..98dfb4e4b 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -1,7 +1,7 @@
 beautifulsoup4==4.14.3
 click==8.3.1
 ghp-import==2.1.0
-importlib-metadata==8.7.0
+importlib-metadata==8.7.1
 Jinja2==3.1.6
 Markdown>=3.2.1,<3.11
 MarkupSafe==3.0.3

From 6f1d96796852f00fb9caa1adc011afbdd6a5f669 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 13:09:29 +0000
Subject: [PATCH 290/427] chore(deps): bump k8s.io/client-go in
 /plugins/scheduler-k3s

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.34.2 to 0.35.0.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.2...v0.35.0)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod |  8 ++++----
 plugins/scheduler-k3s/go.sum | 16 ++++++++--------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index dd406421e..f2837f372 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -26,12 +26,12 @@ require (
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.2
-	k8s.io/api v0.34.2
-	k8s.io/apimachinery v0.34.2
-	k8s.io/client-go v0.34.2
+	k8s.io/api v0.35.0
+	k8s.io/apimachinery v0.35.0
+	k8s.io/client-go v0.35.0
 	k8s.io/kubectl v0.34.2
 	k8s.io/kubernetes v1.34.2
-	k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d
+	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	mvdan.cc/sh/v3 v3.12.0
 	sigs.k8s.io/kustomize/api v0.21.0
 )
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 2508297f4..ba8d32de3 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -540,18 +540,18 @@ gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 helm.sh/helm/v3 v3.19.2 h1:psQjaM8aIWrSVEly6PgYtLu/y6MRSmok4ERiGhZmtUY=
 helm.sh/helm/v3 v3.19.2/go.mod h1:gX10tB5ErM+8fr7bglUUS/UfTOO8UUTYWIBH1IYNnpE=
-k8s.io/api v0.34.2 h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY=
-k8s.io/api v0.34.2/go.mod h1:MMBPaWlED2a8w4RSeanD76f7opUoypY8TFYkSM+3XHw=
+k8s.io/api v0.35.0 h1:iBAU5LTyBI9vw3L5glmat1njFK34srdLmktWwLTprlY=
+k8s.io/api v0.35.0/go.mod h1:AQ0SNTzm4ZAczM03QH42c7l3bih1TbAXYo0DkF8ktnA=
 k8s.io/apiextensions-apiserver v0.34.2 h1:WStKftnGeoKP4AZRz/BaAAEJvYp4mlZGN0UCv+uvsqo=
 k8s.io/apiextensions-apiserver v0.34.2/go.mod h1:398CJrsgXF1wytdaanynDpJ67zG4Xq7yj91GrmYN2SE=
-k8s.io/apimachinery v0.34.2 h1:zQ12Uk3eMHPxrsbUJgNF8bTauTVR2WgqJsTmwTE/NW4=
-k8s.io/apimachinery v0.34.2/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw=
+k8s.io/apimachinery v0.35.0 h1:Z2L3IHvPVv/MJ7xRxHEtk6GoJElaAqDCCU0S6ncYok8=
+k8s.io/apimachinery v0.35.0/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
 k8s.io/apiserver v0.34.2 h1:2/yu8suwkmES7IzwlehAovo8dDE07cFRC7KMDb1+MAE=
 k8s.io/apiserver v0.34.2/go.mod h1:gqJQy2yDOB50R3JUReHSFr+cwJnL8G1dzTA0YLEqAPI=
 k8s.io/cli-runtime v0.34.2 h1:cct1GEuWc3IyVT8MSCoIWzRGw9HJ/C5rgP32H60H6aE=
 k8s.io/cli-runtime v0.34.2/go.mod h1:X13tsrYexYUCIq8MarCBy8lrm0k0weFPTpcaNo7lms4=
-k8s.io/client-go v0.34.2 h1:Co6XiknN+uUZqiddlfAjT68184/37PS4QAzYvQvDR8M=
-k8s.io/client-go v0.34.2/go.mod h1:2VYDl1XXJsdcAxw7BenFslRQX28Dxz91U9MWKjX97fE=
+k8s.io/client-go v0.35.0 h1:IAW0ifFbfQQwQmga0UdoH0yvdqrbwMdq9vIFEhRpxBE=
+k8s.io/client-go v0.35.0/go.mod h1:q2E5AAyqcbeLGPdoRB+Nxe3KYTfPce1Dnu1myQdqz9o=
 k8s.io/component-base v0.34.2 h1:HQRqK9x2sSAsd8+R4xxRirlTjowsg6fWCPwWYeSvogQ=
 k8s.io/component-base v0.34.2/go.mod h1:9xw2FHJavUHBFpiGkZoKuYZ5pdtLKe97DEByaA+hHbM=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
@@ -562,8 +562,8 @@ k8s.io/kubectl v0.34.2 h1:+fWGrVlDONMUmmQLDaGkQ9i91oszjjRAa94cr37hzqA=
 k8s.io/kubectl v0.34.2/go.mod h1:X2KTOdtZZNrTWmUD4oHApJ836pevSl+zvC5sI6oO2YQ=
 k8s.io/kubernetes v1.34.2 h1:WQdDvYJazkmkwSncgNwGvVtaCt4TYXIU3wSMRgvp3MI=
 k8s.io/kubernetes v1.34.2/go.mod h1:m6pZk6a179pRo2wsTiCPORJ86iOEQmfIzUvtyEF8BwA=
-k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d h1:wAhiDyZ4Tdtt7e46e9M5ZSAJ/MnPGPs+Ki1gHw4w1R0=
-k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
+k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 h1:yCiThjArNgVjRbyBGvRvYr/B6G3djvr5pXrh8MXfnsk=
 knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9/go.mod h1:I2vWm0knRQH2WBfpIAkRzOPk0XoXxfu8YJT63ddYWd4=
 mvdan.cc/sh/v3 v3.12.0 h1:ejKUR7ONP5bb+UGHGEG/k9V5+pRVIyD+LsZz7o8KHrI=

From 1733b8ec81ae90835ec02d40ccc76a48137f798b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 22 Dec 2025 13:19:30 -0500
Subject: [PATCH 291/427] fix: ensure the /etc/docker exists when interacting
 with it via postinst

---
 debian/postinst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/postinst b/debian/postinst
index 3abf72ddb..8bef386ac 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -43,6 +43,7 @@ setup-docker-live-restore() {
 
   echo "Enabling docker live-restore"
   if [[ ! -f /etc/docker/daemon.json ]]; then
+    mkdir -p /etc/docker
     echo "{}" >/etc/docker/daemon.json
   fi
 

From 6f30be43c6707ed2d4e465ad693000a6b5d9f584 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 18:21:18 +0000
Subject: [PATCH 292/427] chore(deps): bump helm.sh/helm/v3 in
 /plugins/scheduler-k3s

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.19.2 to 3.19.4.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.19.2...v3.19.4)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 4 ++--
 plugins/scheduler-k3s/go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index f2837f372..891f817b1 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -25,7 +25,7 @@ require (
 	github.com/traefik/traefik/v2 v2.11.32
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
-	helm.sh/helm/v3 v3.19.2
+	helm.sh/helm/v3 v3.19.4
 	k8s.io/api v0.35.0
 	k8s.io/apimachinery v0.35.0
 	k8s.io/client-go v0.35.0
@@ -55,7 +55,7 @@ require (
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v1.0.0-rc.1 // indirect
-	github.com/cyphar/filepath-securejoin v0.6.0 // indirect
+	github.com/cyphar/filepath-securejoin v0.6.1 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/docker/docker-credential-helpers v0.9.3 // indirect
 	github.com/emicklei/go-restful/v3 v3.13.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ba8d32de3..45748c1b6 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -55,8 +55,8 @@ github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSV
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
 github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
-github.com/cyphar/filepath-securejoin v0.6.0 h1:BtGB77njd6SVO6VztOHfPxKitJvd/VPT+OFBFMOi1Is=
-github.com/cyphar/filepath-securejoin v0.6.0/go.mod h1:A8hd4EnAeyujCJRrICiOWqjS1AX0a9kM5XL+NwKoYSc=
+github.com/cyphar/filepath-securejoin v0.6.1 h1:5CeZ1jPXEiYt3+Z6zqprSAgSWiggmpVyciv8syjIpVE=
+github.com/cyphar/filepath-securejoin v0.6.1/go.mod h1:A8hd4EnAeyujCJRrICiOWqjS1AX0a9kM5XL+NwKoYSc=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
@@ -538,8 +538,8 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-helm.sh/helm/v3 v3.19.2 h1:psQjaM8aIWrSVEly6PgYtLu/y6MRSmok4ERiGhZmtUY=
-helm.sh/helm/v3 v3.19.2/go.mod h1:gX10tB5ErM+8fr7bglUUS/UfTOO8UUTYWIBH1IYNnpE=
+helm.sh/helm/v3 v3.19.4 h1:E2yFBejmZBczWr5LblhjZbvAOAwVumfBO1AtN3nqI30=
+helm.sh/helm/v3 v3.19.4/go.mod h1:PC1rk7PqacpkV4acUFMLStOOis7QM9Jq3DveHBInu4s=
 k8s.io/api v0.35.0 h1:iBAU5LTyBI9vw3L5glmat1njFK34srdLmktWwLTprlY=
 k8s.io/api v0.35.0/go.mod h1:AQ0SNTzm4ZAczM03QH42c7l3bih1TbAXYo0DkF8ktnA=
 k8s.io/apiextensions-apiserver v0.34.2 h1:WStKftnGeoKP4AZRz/BaAAEJvYp4mlZGN0UCv+uvsqo=

From a238e41516361039fb730b063a5656caf4dbced8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 20:09:32 +0000
Subject: [PATCH 293/427] chore(deps): bump github.com/kedacore/keda/v2 in
 /plugins/scheduler-k3s

Bumps [github.com/kedacore/keda/v2](https://github.com/kedacore/keda) from 2.18.2 to 2.18.3.
- [Release notes](https://github.com/kedacore/keda/releases)
- [Changelog](https://github.com/kedacore/keda/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kedacore/keda/compare/v2.18.2...v2.18.3)

---
updated-dependencies:
- dependency-name: github.com/kedacore/keda/v2
  dependency-version: 2.18.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index f2837f372..86155b584 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -19,7 +19,7 @@ require (
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
-	github.com/kedacore/keda/v2 v2.18.2
+	github.com/kedacore/keda/v2 v2.18.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 	github.com/traefik/traefik/v2 v2.11.32
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ba8d32de3..33a18684b 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -196,8 +196,8 @@ github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnr
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
-github.com/kedacore/keda/v2 v2.18.2 h1:xId4U0vycfOPNrjsuLcdmyMfaiNkACs9B7csTaq0nL4=
-github.com/kedacore/keda/v2 v2.18.2/go.mod h1:gaFzDtqtXg6KPmMcwzeCjv7aoK8Z1I2NaUkqHkREbDk=
+github.com/kedacore/keda/v2 v2.18.3 h1:PY3o80tzBAzCffS8J6eBZctT4B+g/r26zErNSMleC50=
+github.com/kedacore/keda/v2 v2.18.3/go.mod h1:gaFzDtqtXg6KPmMcwzeCjv7aoK8Z1I2NaUkqHkREbDk=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.18.1 h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co=

From 214e54309418ac66c89bfd291ed75e98a24d65af Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 23 Dec 2025 13:01:24 +0000
Subject: [PATCH 294/427] chore(deps): bump google.golang.org/grpc in
 /tests/apps/gogrpc

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.77.0 to 1.78.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.77.0...v1.78.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/go.mod | 10 +++++-----
 tests/apps/gogrpc/go.sum | 20 ++++++++++----------
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/tests/apps/gogrpc/go.mod b/tests/apps/gogrpc/go.mod
index aa820b22a..fc429a1cb 100644
--- a/tests/apps/gogrpc/go.mod
+++ b/tests/apps/gogrpc/go.mod
@@ -3,10 +3,10 @@ module github.com/dokku/dokko/tests/apps/gorpc
 go 1.25.5
 
 require (
-	golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82 // indirect
-	golang.org/x/sys v0.37.0 // indirect
-	golang.org/x/text v0.30.0 // indirect
-	google.golang.org/grpc v1.77.0
+	golang.org/x/net v0.47.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
+	google.golang.org/grpc v1.78.0
 )
 
 require (
@@ -14,4 +14,4 @@ require (
 	google.golang.org/protobuf v1.36.11
 )
 
-require google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 // indirect
+require google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda // indirect
diff --git a/tests/apps/gogrpc/go.sum b/tests/apps/gogrpc/go.sum
index f11c118cf..2406c744f 100644
--- a/tests/apps/gogrpc/go.sum
+++ b/tests/apps/gogrpc/go.sum
@@ -20,18 +20,18 @@ go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6
 go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA=
 go.opentelemetry.io/otel/trace v1.38.0 h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE=
 go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs=
-golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82 h1:6/3JGEh1C88g7m+qzzTbl3A0FtsLguXieqofVLU/JAo=
-golang.org/x/net v0.46.1-0.20251013234738-63d1a5100f82/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
 gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 h1:M1rk8KBnUsBDg1oPGHNCxG4vc1f49epmTO7xscSajMk=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
-google.golang.org/grpc v1.77.0 h1:wVVY6/8cGA6vvffn+wWK5ToddbgdU3d8MNENr4evgXM=
-google.golang.org/grpc v1.77.0/go.mod h1:z0BY1iVj0q8E1uSQCjL9cppRj+gnZjzDnzV0dHhrNig=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda h1:i/Q+bfisr7gq6feoJnS/DlpdwEL4ihp41fvRiM3Ork0=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
+google.golang.org/grpc v1.78.0 h1:K1XZG/yGDJnzMdd/uZHAkVqJE+xIDOcmdSFZkBUicNc=
+google.golang.org/grpc v1.78.0/go.mod h1:I47qjTo4OKbMkjA/aOOwxDIiPSBofUtQUI5EfpWvW7U=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236 h1:wTUkwrodi4IuWD3kYkMUwCU8BhwFaqDywrXmsthCvQA=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236/go.mod h1:j5uROIAAgi3YmtiETMt1LW0d/lHqQ7wwrIY4uGRXLQ4=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=

From 871c6a91a14f05472cc0a5c9c31a0531fdd76b0b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 23 Dec 2025 13:04:50 +0000
Subject: [PATCH 295/427] chore(deps): bump pyparsing from 3.2.5 to 3.3.1 in
 /docs/_build

Bumps [pyparsing](https://github.com/pyparsing/pyparsing) from 3.2.5 to 3.3.1.
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/3.2.5...3.3.1)

---
updated-dependencies:
- dependency-name: pyparsing
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 98dfb4e4b..6802fbb16 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -13,7 +13,7 @@ mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
 pymdown-extensions==10.19.1
-pyparsing==3.2.5
+pyparsing==3.3.1
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 pyyaml_env_tag==1.1

From bd597c52c7fffb98a2cdcf2b35d548f46e970095 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 23 Dec 2025 13:07:48 +0000
Subject: [PATCH 296/427] chore(deps): bump
 github.com/cert-manager/cert-manager

Bumps [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) from 1.19.1 to 1.19.2.
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](https://github.com/cert-manager/cert-manager/compare/v1.19.1...v1.19.2)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 1482c2cb3..df6f70cbd 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -4,7 +4,7 @@ go 1.25.5
 
 require (
 	github.com/Masterminds/semver/v3 v3.4.0
-	github.com/cert-manager/cert-manager v1.19.1
+	github.com/cert-manager/cert-manager v1.19.2
 	github.com/dokku/dokku/plugins/app-json v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/common v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/config v0.0.0-20250618161309-8d0c35f1333c
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ab8558443..efa45e9ef 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -36,8 +36,8 @@ github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK3
 github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
 github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
-github.com/cert-manager/cert-manager v1.19.1 h1:Txh8L/nLWTDcb7ZnXuXbTe15BxQnLbLirXmbNk0fGgY=
-github.com/cert-manager/cert-manager v1.19.1/go.mod h1:8Ps1VXCQRGKT8zNvLQlhDK1gFKWmYKdIPQFmvTS2JeA=
+github.com/cert-manager/cert-manager v1.19.2 h1:jSprN1h5pgNDSl7HClAmIzXuTxic/5FXJ32kbQHqjlM=
+github.com/cert-manager/cert-manager v1.19.2/go.mod h1:e9NzLtOKxTw7y99qLyWGmPo6mrC1Nh0EKKcMkRfK+GE=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chai2010/gettext-go v1.0.3 h1:9liNh8t+u26xl5ddmWLmsOsdNLwkdRTg5AG+JnTiM80=

From e8eacbad93ba70adddc9abfe1c4383762699c9c5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 23 Dec 2025 13:08:00 +0000
Subject: [PATCH 297/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.32 to 2.11.33.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.33/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.32...v2.11.33)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 1482c2cb3..92ca33bbb 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.32
+	github.com/traefik/traefik/v2 v2.11.33
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.4
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ab8558443..39f64503a 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -343,8 +343,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.32 h1:SoUgYd0TgoQWHmsDUPGcIklzx54xiIPZ9PK5YFEU7Jc=
-github.com/traefik/traefik/v2 v2.11.32/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
+github.com/traefik/traefik/v2 v2.11.33 h1:MPqN5W6Ui65lP2f/uCDH9TV8SvRPulp/7S/P2ESFDbI=
+github.com/traefik/traefik/v2 v2.11.33/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From ea2ffc7747b23dfa83b921d3f78fb46978609261 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 13:05:48 +0000
Subject: [PATCH 298/427] chore(deps): bump github.com/onsi/gomega in
 /plugins/common

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.2 to 1.38.3.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.2...v1.38.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/common/go.mod | 2 +-
 plugins/common/go.sum | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugins/common/go.mod b/plugins/common/go.mod
index 136067b36..561c26ba7 100644
--- a/plugins/common/go.mod
+++ b/plugins/common/go.mod
@@ -7,7 +7,7 @@ require (
 	github.com/fatih/color v1.18.0
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/melbahja/goph v1.4.0
-	github.com/onsi/gomega v1.38.2
+	github.com/onsi/gomega v1.38.3
 	github.com/otiai10/copy v1.14.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
diff --git a/plugins/common/go.sum b/plugins/common/go.sum
index 2e5b9db4b..7e02672dd 100644
--- a/plugins/common/go.sum
+++ b/plugins/common/go.sum
@@ -27,10 +27,10 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/ginkgo/v2 v2.25.1 h1:Fwp6crTREKM+oA6Cz4MsO8RhKQzs2/gOIVOUscMAfZY=
-github.com/onsi/ginkgo/v2 v2.25.1/go.mod h1:ppTWQ1dh9KM/F1XgpeRqelR+zHVwV81DGRSDnFxK7Sk=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
+github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=

From 7367aeedcc5f65c8dd159ad9bf0db9c17c678e6f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Tue, 23 Dec 2025 22:12:47 -0500
Subject: [PATCH 299/427] chore: bump go modules and run go mod tidy

---
 plugins/app-json/go.sum               | 4 ++--
 plugins/apps/go.sum                   | 4 ++--
 plugins/builder/go.sum                | 4 ++--
 plugins/buildpacks/go.sum             | 4 ++--
 plugins/cron/go.sum                   | 4 ++--
 plugins/docker-options/go.sum         | 4 ++--
 plugins/logs/go.sum                   | 4 ++--
 plugins/network/go.sum                | 4 ++--
 plugins/nginx-vhosts/go.sum           | 4 ++--
 plugins/registry/go.sum               | 4 ++--
 plugins/repo/go.sum                   | 4 ++--
 plugins/resource/go.sum               | 4 ++--
 plugins/scheduler-docker-local/go.sum | 4 ++--
 plugins/scheduler/go.sum              | 4 ++--
 14 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index 91201019a..18e3c9a56 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -22,8 +22,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/apps/go.sum b/plugins/apps/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/apps/go.sum
+++ b/plugins/apps/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/builder/go.sum b/plugins/builder/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/builder/go.sum
+++ b/plugins/builder/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/buildpacks/go.sum b/plugins/buildpacks/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/buildpacks/go.sum
+++ b/plugins/buildpacks/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index 74f7267a7..9fae847bd 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -30,8 +30,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/docker-options/go.sum b/plugins/docker-options/go.sum
index b8154df87..66e28823f 100644
--- a/plugins/docker-options/go.sum
+++ b/plugins/docker-options/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/logs/go.sum b/plugins/logs/go.sum
index 39157e9a3..bad89b635 100644
--- a/plugins/logs/go.sum
+++ b/plugins/logs/go.sum
@@ -21,8 +21,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/network/go.sum b/plugins/network/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/network/go.sum
+++ b/plugins/network/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/nginx-vhosts/go.sum b/plugins/nginx-vhosts/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/nginx-vhosts/go.sum
+++ b/plugins/nginx-vhosts/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/registry/go.sum b/plugins/registry/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/registry/go.sum
+++ b/plugins/registry/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/repo/go.sum b/plugins/repo/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/repo/go.sum
+++ b/plugins/repo/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/resource/go.sum b/plugins/resource/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/resource/go.sum
+++ b/plugins/resource/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index 7aa4dd2ae..e0a620ea4 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -30,8 +30,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/scheduler/go.sum b/plugins/scheduler/go.sum
index 94190c5ed..09a418520 100644
--- a/plugins/scheduler/go.sum
+++ b/plugins/scheduler/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=

From 9634facf8bfd37fc5c0cfafcf5b78b5c63e13598 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 24 Dec 2025 13:07:35 +0000
Subject: [PATCH 300/427] chore(deps): bump k8s.io/kubernetes in
 /plugins/scheduler-k3s

Bumps [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) from 1.34.2 to 1.35.0.
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](https://github.com/kubernetes/kubernetes/compare/v1.34.2...v1.35.0)

---
updated-dependencies:
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 25b5599ae..3b8587bfb 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -30,7 +30,7 @@ require (
 	k8s.io/apimachinery v0.35.0
 	k8s.io/client-go v0.35.0
 	k8s.io/kubectl v0.34.2
-	k8s.io/kubernetes v1.34.2
+	k8s.io/kubernetes v1.35.0
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	mvdan.cc/sh/v3 v3.12.0
 	sigs.k8s.io/kustomize/api v0.21.0
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index d037756fa..cf7c2a896 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -560,8 +560,8 @@ k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZ
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
 k8s.io/kubectl v0.34.2 h1:+fWGrVlDONMUmmQLDaGkQ9i91oszjjRAa94cr37hzqA=
 k8s.io/kubectl v0.34.2/go.mod h1:X2KTOdtZZNrTWmUD4oHApJ836pevSl+zvC5sI6oO2YQ=
-k8s.io/kubernetes v1.34.2 h1:WQdDvYJazkmkwSncgNwGvVtaCt4TYXIU3wSMRgvp3MI=
-k8s.io/kubernetes v1.34.2/go.mod h1:m6pZk6a179pRo2wsTiCPORJ86iOEQmfIzUvtyEF8BwA=
+k8s.io/kubernetes v1.35.0 h1:PUOojD8c8E3csMP5NX+nLLne6SGqZjrYCscptyBfWMY=
+k8s.io/kubernetes v1.35.0/go.mod h1:Tzk9Y9W/XUFFFgTUVg+BAowoFe+Pc7koGLuaiLHdcFg=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 h1:yCiThjArNgVjRbyBGvRvYr/B6G3djvr5pXrh8MXfnsk=

From 2d3782c8ebab8ecfe2d2671e3748eb71bec2e534 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 7 Dec 2025 08:57:15 -0500
Subject: [PATCH 301/427] fix: pass global build args as array when building
 nixpacks apps

Refs #8187
---
 plugins/builder-nixpacks/builder-build | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index d74d9ba3a..ab85a5766 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -35,7 +35,6 @@ trigger-builder-nixpacks-builder-build() {
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
-  DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
 
   DOCKER_ARGS=" $DOCKER_ARGS "
   eval set -- "$DOCKER_ARGS"
@@ -244,7 +243,7 @@ trigger-builder-nixpacks-builder-build() {
   eval "$(config_export app "$APP" --merged)"
 
   # shellcheck disable=SC2086
-  if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
   fi

From e7be49f0ce128beb7850ae6baeb3af583b889b78 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 24 Dec 2025 00:09:37 -0500
Subject: [PATCH 302/427] fix: ensure all build flags are consumed as an array

---
 plugins/builder-dockerfile/builder-build |  2 +-
 plugins/builder-herokuish/builder-build  |  2 +-
 plugins/builder-herokuish/pre-build      |  2 +-
 plugins/builder-lambda/builder-release   |  2 +-
 plugins/builder-nixpacks/builder-build   |  7 ++++--
 plugins/builder-nixpacks/builder-release |  2 +-
 plugins/builder-railpack/builder-build   |  2 +-
 plugins/builder-railpack/builder-release |  3 ++-
 tests/unit/builder-dockerfile.bats       | 28 +++++++++++++++++++++++
 tests/unit/builder-herokuish.bats        | 29 ++++++++++++++++++++++++
 tests/unit/builder-lambda.bats           | 28 +++++++++++++++++++++++
 tests/unit/builder-nixpacks.bats         | 29 ++++++++++++++++++++++++
 tests/unit/builder-pack.bats             | 28 +++++++++++++++++++++++
 13 files changed, 155 insertions(+), 9 deletions(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index f8c8c46fa..1fc87e7ab 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -17,7 +17,7 @@ trigger-builder-dockerfile-builder-build() {
   dokku_log_info1 "Building $APP from Dockerfile"
 
   local IMAGE=$(get_app_image_name "$APP")
-  local DOCKER_BUILD_LABEL_ARGS=("--label=dokku" "--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=dockerfile" "--label=com.dokku.app-name=$APP")
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=dockerfile" "--label=com.dokku.app-name=$APP" "--label=dokku")
 
   pushd "$SOURCECODE_WORK_DIR" &>/dev/null
 
diff --git a/plugins/builder-herokuish/builder-build b/plugins/builder-herokuish/builder-build
index 0ad5d5aac..f8a396512 100755
--- a/plugins/builder-herokuish/builder-build
+++ b/plugins/builder-herokuish/builder-build
@@ -45,7 +45,7 @@ trigger-builder-herokuish-builder-build() {
   NEW_DOKKU_IMAGE=$(plugn trigger builder-dokku-image "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR" "$DOKKU_IMAGE")
   [[ -n "$NEW_DOKKU_IMAGE" ]] && DOKKU_IMAGE="$NEW_DOKKU_IMAGE"
 
-  local DOCKER_BUILD_LABEL_ARGS="--label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.app-name=$APP"
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=herokuish" "--label=com.dokku.app-name=$APP" "--label=dokku")
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/copy-source.Dockerfile" --build-arg APP_IMAGE="$DOKKU_IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" --build-arg "TRACE=$DOKKU_TRACE" -t $IMAGE "$SOURCECODE_WORK_DIR"; then
diff --git a/plugins/builder-herokuish/pre-build b/plugins/builder-herokuish/pre-build
index 2e2234d33..35bd1bb9e 100755
--- a/plugins/builder-herokuish/pre-build
+++ b/plugins/builder-herokuish/pre-build
@@ -14,7 +14,7 @@ trigger-builder-herokuish-pre-build-buildpack() {
     return
   fi
 
-  local DOCKER_BUILD_LABEL_ARGS="--label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.app-name=$APP"
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=herokuish" "--label=com.dokku.app-name=$APP" "--label=dokku")
 
   IMAGE=$(get_app_image_name "$APP")
 
diff --git a/plugins/builder-lambda/builder-release b/plugins/builder-lambda/builder-release
index adedd36de..fcfe701bb 100755
--- a/plugins/builder-lambda/builder-release
+++ b/plugins/builder-lambda/builder-release
@@ -22,7 +22,7 @@ trigger-builder-lambda-builder-release() {
   TMP_WORK_DIR="$(mktemp -d "/tmp/dokku-${DOKKU_PID}-${FUNCNAME[0]}.XXXXXX")"
   trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
 
-  local DOCKER_BUILD_LABEL_ARGS="--label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.app-name=$APP  --label=com.dokku.image-stage=release --label=dokku"
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=lambda" "--label=com.dokku.app-name=$APP" "--label=dokku")
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-lambda/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index ab85a5766..df8662b55 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -6,6 +6,7 @@ set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
 trigger-builder-nixpacks-builder-build() {
+  set -x
   declare desc="builder-nixpacks builder-build plugin trigger"
   declare trigger="builder-build"
   declare BUILDER_TYPE="$1" APP="$2" SOURCECODE_WORK_DIR="$3"
@@ -21,7 +22,7 @@ trigger-builder-nixpacks-builder-build() {
   fi
 
   local IMAGE=$(get_app_image_name "$APP")
-  local DOCKER_BUILD_LABEL_ARGS=("--label=dokku" "--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=nixpacks" "--label=com.dokku.app-name=$APP")
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=nixpacks" "--label=com.dokku.app-name=$APP" "--label=dokku")
 
   pushd "$SOURCECODE_WORK_DIR" &>/dev/null
 
@@ -35,6 +36,7 @@ trigger-builder-nixpacks-builder-build() {
 
   local DOCKER_ARGS=$(: | plugn trigger docker-args-build "$APP" "$BUILDER_TYPE")
   DOCKER_ARGS+=$(: | plugn trigger docker-args-process-build "$APP" "$BUILDER_TYPE")
+  DOCKER_ARGS+=" $DOKKU_GLOBAL_BUILD_ARGS"
 
   DOCKER_ARGS=" $DOCKER_ARGS "
   eval set -- "$DOCKER_ARGS"
@@ -243,7 +245,7 @@ trigger-builder-nixpacks-builder-build() {
   eval "$(config_export app "$APP" --merged)"
 
   # shellcheck disable=SC2086
-  if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
+  if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
   fi
@@ -255,6 +257,7 @@ trigger-builder-nixpacks-builder-build() {
 
   plugn trigger post-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
   popd &>/dev/null || pushd "/tmp" >/dev/null
+  set +x
 }
 
 trigger-builder-nixpacks-builder-build "$@"
diff --git a/plugins/builder-nixpacks/builder-release b/plugins/builder-nixpacks/builder-release
index 7b0d4e23c..ca75d124f 100755
--- a/plugins/builder-nixpacks/builder-release
+++ b/plugins/builder-nixpacks/builder-release
@@ -18,7 +18,7 @@ trigger-builder-nixpacks-builder-release() {
   TMP_WORK_DIR="$(mktemp -d "/tmp/dokku-${DOKKU_PID}-${FUNCNAME[0]}.XXXXXX")"
   trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
 
-  local DOCKER_BUILD_LABEL_ARGS="--label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.app-name=$APP  --label=com.dokku.image-stage=release --label=dokku"
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=nixpacks" "--label=com.dokku.app-name=$APP" "--label=dokku")
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-nixpacks/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 3b7e7e6df..1cfdd4322 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -21,7 +21,7 @@ trigger-builder-railpack-builder-build() {
   fi
 
   local IMAGE=$(get_app_image_name "$APP")
-  local DOCKER_BUILD_LABEL_ARGS=("--label=dokku" "--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP")
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP" "--label=dokku")
 
   pushd "$SOURCECODE_WORK_DIR" &>/dev/null
 
diff --git a/plugins/builder-railpack/builder-release b/plugins/builder-railpack/builder-release
index 7c3650421..dbaa730f5 100755
--- a/plugins/builder-railpack/builder-release
+++ b/plugins/builder-railpack/builder-release
@@ -18,7 +18,8 @@ trigger-builder-railpack-builder-release() {
   TMP_WORK_DIR="$(mktemp -d "/tmp/dokku-${DOKKU_PID}-${FUNCNAME[0]}.XXXXXX")"
   trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
 
-  local DOCKER_BUILD_LABEL_ARGS="--label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.app-name=$APP  --label=com.dokku.image-stage=release --label=dokku"
+  local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP" "--label=dokku")
+
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index 5a5b0f3db..0205dd334 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -135,3 +135,31 @@ EOF
   echo "status: $status"
   assert_success
 }
+
+@test "(builder-dockerfile) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected dockerfile"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app dockerfile
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
+}
\ No newline at end of file
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index 3501e8412..90560c14a 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -88,3 +88,32 @@ teardown() {
   echo "status: $status"
   assert_failure
 }
+
+
+@test "(builder-herokuish) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected herokuish"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
+}
\ No newline at end of file
diff --git a/tests/unit/builder-lambda.bats b/tests/unit/builder-lambda.bats
index 57d01668b..367b0b3dd 100644
--- a/tests/unit/builder-lambda.bats
+++ b/tests/unit/builder-lambda.bats
@@ -134,6 +134,34 @@ teardown() {
   assert_success
 }
 
+@test "(builder-lambda) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected lambda"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_lambda_yml
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
+}
+
 inject_lambda_yml() {
   local APP="$1"
   local APP_REPO_DIR="$2"
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 5fe1dfbbf..9309c7bba 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -44,6 +44,35 @@ teardown() {
   assert_output_contains 'load build definition from Dockerfile'
 }
 
+@test "(builder-nixpacks) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected nixpacks"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
+}
+
+
 inject_requirements_txt() {
   local APP="$1"
   local APP_REPO_DIR="$2"
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index fad2052fb..09c659566 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -126,3 +126,31 @@ teardown() {
   assert_success
   assert_output_contains '"APP_RESPECTS_ENV_VARS": "1"'
 }
+
+@test "(builder-pack) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt_cnb
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
+}
\ No newline at end of file

From bba2cd9710d2aab80bfa6cbd5392595be9f13de2 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 24 Dec 2025 00:35:38 -0500
Subject: [PATCH 303/427] fix: correct lint issues

---
 tests/unit/builder-dockerfile.bats | 2 +-
 tests/unit/builder-herokuish.bats  | 3 +--
 tests/unit/builder-nixpacks.bats   | 1 -
 tests/unit/builder-pack.bats       | 2 +-
 4 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index 0205dd334..754a09be1 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -162,4 +162,4 @@ EOF
   echo "status: $status"
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
-}
\ No newline at end of file
+}
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index 90560c14a..8677d52e5 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -89,7 +89,6 @@ teardown() {
   assert_failure
 }
 
-
 @test "(builder-herokuish) run" {
   run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
   echo "output: $output"
@@ -116,4 +115,4 @@ teardown() {
   echo "status: $status"
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
-}
\ No newline at end of file
+}
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 9309c7bba..98a9734b5 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -72,7 +72,6 @@ teardown() {
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
 
-
 inject_requirements_txt() {
   local APP="$1"
   local APP_REPO_DIR="$2"
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 09c659566..ef62e7ea3 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -153,4 +153,4 @@ teardown() {
   echo "status: $status"
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
-}
\ No newline at end of file
+}

From d5c44e80e794fa4eaab053d77ff4ce29ac116902 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 24 Dec 2025 04:08:18 -0500
Subject: [PATCH 304/427] fix: remove duplicate test

---
 tests/unit/builder-pack.bats | 44 +++++++++++++-----------------------
 1 file changed, 16 insertions(+), 28 deletions(-)

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index ef62e7ea3..3ad4eaf1a 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -77,6 +77,11 @@ teardown() {
 }
 
 @test "(builder-pack) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
   run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
   echo "output: $output"
   echo "status: $status"
@@ -95,6 +100,17 @@ teardown() {
   echo "status: $status"
   assert_success
   assert_output "['task.py', 'test']"
+
+  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
 
 @test "(builder-pack) git:from-image without a Procfile" {
@@ -126,31 +142,3 @@ teardown() {
   assert_success
   assert_output_contains '"APP_RESPECTS_ENV_VARS": "1"'
 }
-
-@test "(builder-pack) run" {
-  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt_cnb
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku ps:inspect $TEST_APP"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku run $TEST_APP env"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-  assert_output_contains "SECRET_KEY=fjdkslafjdk"
-}

From 89c260ac843c618f223589e7e37be8df761a12fe Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 24 Dec 2025 15:32:18 -0500
Subject: [PATCH 305/427] fix: deploy correct app for lambda tests

---
 tests/unit/builder-lambda.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/builder-lambda.bats b/tests/unit/builder-lambda.bats
index 367b0b3dd..ec13b1152 100644
--- a/tests/unit/builder-lambda.bats
+++ b/tests/unit/builder-lambda.bats
@@ -145,7 +145,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_lambda_yml
+  run deploy_app lambda-python dokku@$DOKKU_DOMAIN:$TEST_APP inject_lambda_yml
   echo "output: $output"
   echo "status: $status"
   assert_success

From 9d18896c4ce8b1f0d4230b80e71e08bc31a1747a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 24 Dec 2025 17:05:50 -0500
Subject: [PATCH 306/427] tests: drop lambda run tests as they shouldn't be
 relevant

These are functions and therefore are invoked differently.
---
 tests/unit/builder-lambda.bats | 28 ----------------------------
 1 file changed, 28 deletions(-)

diff --git a/tests/unit/builder-lambda.bats b/tests/unit/builder-lambda.bats
index ec13b1152..57d01668b 100644
--- a/tests/unit/builder-lambda.bats
+++ b/tests/unit/builder-lambda.bats
@@ -134,34 +134,6 @@ teardown() {
   assert_success
 }
 
-@test "(builder-lambda) run" {
-  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku builder:set $TEST_APP selected lambda"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run deploy_app lambda-python dokku@$DOKKU_DOMAIN:$TEST_APP inject_lambda_yml
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku ps:inspect $TEST_APP"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-
-  run /bin/bash -c "dokku run $TEST_APP env"
-  echo "output: $output"
-  echo "status: $status"
-  assert_success
-  assert_output_contains "SECRET_KEY=fjdkslafjdk"
-}
-
 inject_lambda_yml() {
   local APP="$1"
   local APP_REPO_DIR="$2"

From 0103f20ed6a0f5a57781bae0ce3acb43311a14bb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Dec 2025 13:07:26 +0000
Subject: [PATCH 307/427] chore(deps): bump github.com/go-resty/resty/v2 in
 /plugins/scheduler-k3s

Bumps [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) from 2.17.0 to 2.17.1.
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](https://github.com/go-resty/resty/compare/v2.17.0...v2.17.1)

---
updated-dependencies:
- dependency-name: github.com/go-resty/resty/v2
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 3b8587bfb..48d02e92b 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -15,7 +15,7 @@ require (
 	github.com/fatih/color v1.18.0
 	github.com/fluxcd/pkg/kustomize v1.24.0
 	github.com/go-openapi/jsonpointer v0.22.4
-	github.com/go-resty/resty/v2 v2.17.0
+	github.com/go-resty/resty/v2 v2.17.1
 	github.com/gofrs/flock v0.13.0
 	github.com/gosimple/slug v1.15.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index cf7c2a896..a5a571133 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -127,8 +127,8 @@ github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6
 github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
 github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
-github.com/go-resty/resty/v2 v2.17.0 h1:pW9DeXcaL4Rrym4EZ8v7L19zZiIlWPg5YXAcVmt+gN0=
-github.com/go-resty/resty/v2 v2.17.0/go.mod h1:kCKZ3wWmwJaNc7S29BRtUhJwy7iqmn+2mLtQrOyQlVA=
+github.com/go-resty/resty/v2 v2.17.1 h1:x3aMpHK1YM9e4va/TMDRlusDDoZiQ+ViDu/WpA6xTM4=
+github.com/go-resty/resty/v2 v2.17.1/go.mod h1:kCKZ3wWmwJaNc7S29BRtUhJwy7iqmn+2mLtQrOyQlVA=
 github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg=
 github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
 github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=

From 3d49dbe63f82bf339d38d151be206e89406e5258 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 18:06:22 -0500
Subject: [PATCH 308/427] tests: add tests to prove that Procfile tasks all
 work for every builder

Closes #8242
---
 tests/apps/python/Procfile         |  1 +
 tests/unit/builder-dockerfile.bats | 11 +++++++--
 tests/unit/builder-herokuish.bats  |  9 +++++++-
 tests/unit/builder-nixpacks.bats   | 11 ++++++++-
 tests/unit/builder-pack.bats       |  3 ++-
 tests/unit/builder-railpack.bats   | 37 ++++++++++++++++++++++++++++++
 6 files changed, 67 insertions(+), 5 deletions(-)

diff --git a/tests/apps/python/Procfile b/tests/apps/python/Procfile
index 77b9a38ff..8a57141ee 100644
--- a/tests/apps/python/Procfile
+++ b/tests/apps/python/Procfile
@@ -8,6 +8,7 @@ web: python3 -u web.py first.Procfile # testing inline comment
 worker: python3 -u worker.py
 custom: echo -n
 release: python3 -u release.py
+task: python3 -u task.py test
 
 
 # Old version with separate processes (use this if you have issues with the threaded version)
diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index 754a09be1..ad7226949 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -147,15 +147,22 @@ EOF
   echo "status: $status"
   assert_success
 
-  run deploy_app dockerfile
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP convert_to_dockerfile
   echo "output: $output"
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  run /bin/bash -c "dokku run $TEST_APP python task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
+  assert_output "['task.py', 'test']"
+
+  run /bin/bash -c "dokku run $TEST_APP task"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index 8677d52e5..3be33a035 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -105,10 +105,17 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  run /bin/bash -c "dokku run $TEST_APP python task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
+  assert_output "['task.py', 'test']"
+
+  run /bin/bash -c "dokku run $TEST_APP task"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 98a9734b5..1685cbb24 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -59,11 +59,20 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
+  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains "SECRET_KEY: fjdkslafjdk"
 
-  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  run /bin/bash -c "dokku run $TEST_APP python task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
+  assert_output "['task.py', 'test']"
+
+  run /bin/bash -c "dokku run $TEST_APP task"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 3ad4eaf1a..279629800 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -101,10 +101,11 @@ teardown() {
   assert_success
   assert_output "['task.py', 'test']"
 
-  run /bin/bash -c "dokku ps:inspect $TEST_APP"
+  run /bin/bash -c "dokku run $TEST_APP task"
   echo "output: $output"
   echo "status: $status"
   assert_success
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index e0dcc5f6c..1ae3192b8 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -54,6 +54,43 @@ teardown() {
   assert_output_contains 'Successfully built image in'
 }
 
+@test "(builder-pack) run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected railpack"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains 'create mise config'
+  assert_output_contains 'Successfully built image in'
+
+  run /bin/bash -c "dokku run $TEST_APP python task.py test"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'test']"
+
+  run /bin/bash -c "dokku run $TEST_APP task"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'test']"
+
+  run /bin/bash -c "dokku run $TEST_APP env"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "SECRET_KEY=fjdkslafjdk"
+}
+
 inject_requirements_txt() {
   local APP="$1"
   local APP_REPO_DIR="$2"

From ca51f2de01657d81dfa9993403d9873502ba21d1 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 18:26:01 -0500
Subject: [PATCH 309/427] chore: remove debug mode

---
 plugins/builder-nixpacks/builder-build | 2 --
 1 file changed, 2 deletions(-)

diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index df8662b55..8509c2a29 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -6,7 +6,6 @@ set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
 
 trigger-builder-nixpacks-builder-build() {
-  set -x
   declare desc="builder-nixpacks builder-build plugin trigger"
   declare trigger="builder-build"
   declare BUILDER_TYPE="$1" APP="$2" SOURCECODE_WORK_DIR="$3"
@@ -257,7 +256,6 @@ trigger-builder-nixpacks-builder-build() {
 
   plugn trigger post-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
   popd &>/dev/null || pushd "/tmp" >/dev/null
-  set +x
 }
 
 trigger-builder-nixpacks-builder-build "$@"

From 3a476716ebaf665733d2d65009f71c8aa1972a08 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 18:29:02 -0500
Subject: [PATCH 310/427] tests: allow specifying 'at least 1 occurrence' for
 assert_output_contains

---
 tests/unit/test_helper.bash | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 1669d5c29..95e89376d 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -148,6 +148,14 @@ assert_output_contains() {
     input="${input/$expected/}"
     found=$((found + 1))
   done
+
+  if [[ "$count" -eq -1 ]]; then
+    if [[ "$found" -gt 0 ]]; then
+      return 0
+    fi
+    flunk "expected at least 1 occurrence of '$expected', found $found"
+  fi
+
   [[ "$count" -eq "$found" ]] || flunk "expected $count occurrences of '$expected', found $found"
 }
 

From 52418dd799632849b049b240a22a298f7a5cb52c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 18:29:42 -0500
Subject: [PATCH 311/427] tests: allow 1 or more occurrends of 'load build
 definition from Dockerfile'

For unknown reasons, sometimes this gets output twice by the nixpacks builder.
---
 tests/unit/builder-nixpacks.bats | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 1685cbb24..04f03976d 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -29,7 +29,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains 'load build definition from Dockerfile' -1
   assert_output_contains "SECRET_KEY: fjdkslafjdk"
 
   run /bin/bash -c "dokku builder-nixpacks:set $TEST_APP nixpackstoml-path nonexistent.toml"
@@ -41,7 +41,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains 'load build definition from Dockerfile' -1
 }
 
 @test "(builder-nixpacks) run" {
@@ -59,7 +59,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains 'load build definition from Dockerfile'
+  assert_output_contains 'load build definition from Dockerfile' -1
   assert_output_contains "SECRET_KEY: fjdkslafjdk"
 
   run /bin/bash -c "dokku run $TEST_APP python task.py test"

From 153ff6ecb4b3a538b7df2b0b115f75a814820142 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 18:32:26 -0500
Subject: [PATCH 312/427] tests: fix expected output when task is specified
 from Procfile

When run from a Procfile, we output an additional message like "-----> Found 'task' in Procfile, running that command".
---
 tests/unit/builder-dockerfile.bats | 2 +-
 tests/unit/builder-herokuish.bats  | 2 +-
 tests/unit/builder-nixpacks.bats   | 2 +-
 tests/unit/builder-pack.bats       | 2 +-
 tests/unit/builder-railpack.bats   | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index ad7226949..d48958023 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -162,7 +162,7 @@ EOF
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "['task.py', 'test']"
+  assert_output_contains "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index 3be33a035..613891abe 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -115,7 +115,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "['task.py', 'test']"
+  assert_output_contains "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 04f03976d..4ee3286ad 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -72,7 +72,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "['task.py', 'test']"
+  assert_output_contains "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 279629800..a51582da5 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -105,7 +105,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "['task.py', 'test']"
+  assert_output_contains "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 1ae3192b8..80c427a82 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -82,7 +82,7 @@ teardown() {
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output "['task.py', 'test']"
+  assert_output_contains "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"

From 4a7328b02294d0e2e20d1dad06983cb902bbd586 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 18:34:39 -0500
Subject: [PATCH 313/427] tests: update expected output

---
 tests/unit/ps-general-2.bats | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/unit/ps-general-2.bats b/tests/unit/ps-general-2.bats
index 379d7727d..db2520b3b 100644
--- a/tests/unit/ps-general-2.bats
+++ b/tests/unit/ps-general-2.bats
@@ -169,7 +169,7 @@ teardown() {
   run /bin/bash -c "dokku --quiet ps:scale $TEST_APP"
   output=$(echo "$output" | tr -s " ")
   echo "output: ($output)"
-  assert_output $'cron: 0\ncustom: 0\nrelease: 0\nweb: 1\nworker: 1'
+  assert_output $'cron: 0\ncustom: 0\nrelease: 0\ntask: 0\nweb: 1\nworker: 1'
 
   run /bin/bash -c "dokku ps:scale $TEST_APP worker=0"
   echo "output: $output"
@@ -179,7 +179,7 @@ teardown() {
   run /bin/bash -c "dokku --quiet ps:scale $TEST_APP"
   output=$(echo "$output" | tr -s " ")
   echo "output: ($output)"
-  assert_output $'cron: 0\ncustom: 0\nrelease: 0\nweb: 1\nworker: 0'
+  assert_output $'cron: 0\ncustom: 0\nrelease: 0\ntask: 0\nweb: 1\nworker: 0'
 
   run /bin/bash -c "dokku ps:set $TEST_APP procfile-path second.Procfile"
   echo "output: $output"

From 4e50dbfb0273aa23312681f2e206ef0f3a6a957d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 19:05:30 -0500
Subject: [PATCH 314/427] tests: run tasks with quiet output so we can check
 the entire output

---
 tests/unit/builder-dockerfile.bats | 4 ++--
 tests/unit/builder-herokuish.bats  | 4 ++--
 tests/unit/builder-nixpacks.bats   | 4 ++--
 tests/unit/builder-pack.bats       | 4 ++--
 tests/unit/builder-railpack.bats   | 4 ++--
 5 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index d48958023..c64d5bc36 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -158,11 +158,11 @@ EOF
   assert_success
   assert_output "['task.py', 'test']"
 
-  run /bin/bash -c "dokku run $TEST_APP task"
+  run /bin/bash -c "dokku --quiet run $TEST_APP task"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains "['task.py', 'test']"
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index 613891abe..fabc7c4a5 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -111,11 +111,11 @@ teardown() {
   assert_success
   assert_output "['task.py', 'test']"
 
-  run /bin/bash -c "dokku run $TEST_APP task"
+  run /bin/bash -c "dokku --quiet run $TEST_APP task"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains "['task.py', 'test']"
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 4ee3286ad..fa765fac3 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -68,11 +68,11 @@ teardown() {
   assert_success
   assert_output "['task.py', 'test']"
 
-  run /bin/bash -c "dokku run $TEST_APP task"
+  run /bin/bash -c "dokku --quiet run $TEST_APP task"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains "['task.py', 'test']"
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index a51582da5..cf052a926 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -101,11 +101,11 @@ teardown() {
   assert_success
   assert_output "['task.py', 'test']"
 
-  run /bin/bash -c "dokku run $TEST_APP task"
+  run /bin/bash -c "dokku --quiet run $TEST_APP task"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains "['task.py', 'test']"
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 80c427a82..2f5ab5541 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -78,11 +78,11 @@ teardown() {
   assert_success
   assert_output "['task.py', 'test']"
 
-  run /bin/bash -c "dokku run $TEST_APP task"
+  run /bin/bash -c "dokku --quiet run $TEST_APP task"
   echo "output: $output"
   echo "status: $status"
   assert_success
-  assert_output_contains "['task.py', 'test']"
+  assert_output "['task.py', 'test']"
 
   run /bin/bash -c "dokku run $TEST_APP env"
   echo "output: $output"

From 5e2e53d86497b7812e4cd485ecda3c4052d33f61 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 19:07:56 -0500
Subject: [PATCH 315/427] tests: run python3 instead of python

---
 tests/unit/builder-dockerfile.bats | 2 +-
 tests/unit/builder-herokuish.bats  | 2 +-
 tests/unit/builder-nixpacks.bats   | 2 +-
 tests/unit/builder-pack.bats       | 2 +-
 tests/unit/builder-railpack.bats   | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index c64d5bc36..73c5b9c99 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -152,7 +152,7 @@ EOF
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku run $TEST_APP python task.py test"
+  run /bin/bash -c "dokku run $TEST_APP python3 task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index fabc7c4a5..fb1536f91 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -105,7 +105,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run /bin/bash -c "dokku run $TEST_APP python task.py test"
+  run /bin/bash -c "dokku run $TEST_APP python3 task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index fa765fac3..e66a6147a 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -62,7 +62,7 @@ teardown() {
   assert_output_contains 'load build definition from Dockerfile' -1
   assert_output_contains "SECRET_KEY: fjdkslafjdk"
 
-  run /bin/bash -c "dokku run $TEST_APP python task.py test"
+  run /bin/bash -c "dokku run $TEST_APP python3 task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index cf052a926..55c662149 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -95,7 +95,7 @@ teardown() {
   assert_output_contains 'Building with buildpack 1' 0
   assert_output_contains 'Installing dependencies using pip'
 
-  run /bin/bash -c "dokku run $TEST_APP python task.py test"
+  run /bin/bash -c "dokku run $TEST_APP python3 task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 2f5ab5541..531aed86b 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -72,7 +72,7 @@ teardown() {
   assert_output_contains 'create mise config'
   assert_output_contains 'Successfully built image in'
 
-  run /bin/bash -c "dokku run $TEST_APP python task.py test"
+  run /bin/bash -c "dokku run $TEST_APP python3 task.py test"
   echo "output: $output"
   echo "status: $status"
   assert_success

From 3ae8fae9fdaf3f6ebe273ab6ce40a4a630353534 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 19:49:57 -0500
Subject: [PATCH 316/427] fix: ensure the buildkit container is always running

---
 tests/unit/builder-railpack.bats | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 531aed86b..a904e553b 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -5,7 +5,6 @@ load test_helper
 setup_file() {
   global_setup
   install_railpack
-  docker run --rm --privileged -d --name buildkit moby/buildkit:latest
   touch /etc/default/dokku
   sudo tee -a /etc/default/dokku <<<"export BUILDKIT_HOST='docker-container://buildkit'"
 }
@@ -16,7 +15,9 @@ teardown_file() {
 }
 
 setup() {
+  global_setup
   create_app
+  docker run --rm --privileged -d --name buildkit moby/buildkit:latest
 }
 
 teardown() {

From eb6de2f7091bdae03f1fc8b1d3c83c12680b8400 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 24 Dec 2025 20:52:10 +0000
Subject: [PATCH 317/427] chore(deps): bump k8s.io/kubectl in
 /plugins/scheduler-k3s

Bumps [k8s.io/kubectl](https://github.com/kubernetes/kubectl) from 0.34.2 to 0.35.0.
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.34.2...v0.35.0)

---
updated-dependencies:
- dependency-name: k8s.io/kubectl
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod |  6 +++---
 plugins/scheduler-k3s/go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 48d02e92b..8c67c98cd 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -29,7 +29,7 @@ require (
 	k8s.io/api v0.35.0
 	k8s.io/apimachinery v0.35.0
 	k8s.io/client-go v0.35.0
-	k8s.io/kubectl v0.34.2
+	k8s.io/kubectl v0.35.0
 	k8s.io/kubernetes v1.35.0
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	mvdan.cc/sh/v3 v3.12.0
@@ -161,8 +161,8 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	k8s.io/apiextensions-apiserver v0.34.2 // indirect
 	k8s.io/apiserver v0.34.2 // indirect
-	k8s.io/cli-runtime v0.34.2 // indirect
-	k8s.io/component-base v0.34.2 // indirect
+	k8s.io/cli-runtime v0.35.0 // indirect
+	k8s.io/component-base v0.35.0 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	knative.dev/pkg v0.0.0-20250708013613-d3550d4350f9 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index a5a571133..05559250d 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -548,18 +548,18 @@ k8s.io/apimachinery v0.35.0 h1:Z2L3IHvPVv/MJ7xRxHEtk6GoJElaAqDCCU0S6ncYok8=
 k8s.io/apimachinery v0.35.0/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
 k8s.io/apiserver v0.34.2 h1:2/yu8suwkmES7IzwlehAovo8dDE07cFRC7KMDb1+MAE=
 k8s.io/apiserver v0.34.2/go.mod h1:gqJQy2yDOB50R3JUReHSFr+cwJnL8G1dzTA0YLEqAPI=
-k8s.io/cli-runtime v0.34.2 h1:cct1GEuWc3IyVT8MSCoIWzRGw9HJ/C5rgP32H60H6aE=
-k8s.io/cli-runtime v0.34.2/go.mod h1:X13tsrYexYUCIq8MarCBy8lrm0k0weFPTpcaNo7lms4=
+k8s.io/cli-runtime v0.35.0 h1:PEJtYS/Zr4p20PfZSLCbY6YvaoLrfByd6THQzPworUE=
+k8s.io/cli-runtime v0.35.0/go.mod h1:VBRvHzosVAoVdP3XwUQn1Oqkvaa8facnokNkD7jOTMY=
 k8s.io/client-go v0.35.0 h1:IAW0ifFbfQQwQmga0UdoH0yvdqrbwMdq9vIFEhRpxBE=
 k8s.io/client-go v0.35.0/go.mod h1:q2E5AAyqcbeLGPdoRB+Nxe3KYTfPce1Dnu1myQdqz9o=
-k8s.io/component-base v0.34.2 h1:HQRqK9x2sSAsd8+R4xxRirlTjowsg6fWCPwWYeSvogQ=
-k8s.io/component-base v0.34.2/go.mod h1:9xw2FHJavUHBFpiGkZoKuYZ5pdtLKe97DEByaA+hHbM=
+k8s.io/component-base v0.35.0 h1:+yBrOhzri2S1BVqyVSvcM3PtPyx5GUxCK2tinZz1G94=
+k8s.io/component-base v0.35.0/go.mod h1:85SCX4UCa6SCFt6p3IKAPej7jSnF3L8EbfSyMZayJR0=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
-k8s.io/kubectl v0.34.2 h1:+fWGrVlDONMUmmQLDaGkQ9i91oszjjRAa94cr37hzqA=
-k8s.io/kubectl v0.34.2/go.mod h1:X2KTOdtZZNrTWmUD4oHApJ836pevSl+zvC5sI6oO2YQ=
+k8s.io/kubectl v0.35.0 h1:cL/wJKHDe8E8+rP3G7avnymcMg6bH6JEcR5w5uo06wc=
+k8s.io/kubectl v0.35.0/go.mod h1:VR5/TSkYyxZwrRwY5I5dDq6l5KXmiCb+9w8IKplk3Qo=
 k8s.io/kubernetes v1.35.0 h1:PUOojD8c8E3csMP5NX+nLLne6SGqZjrYCscptyBfWMY=
 k8s.io/kubernetes v1.35.0/go.mod h1:Tzk9Y9W/XUFFFgTUVg+BAowoFe+Pc7koGLuaiLHdcFg=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=

From f004dafb99a8d7c3358fb31ab6263d395f577f11 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 25 Dec 2025 20:58:24 -0500
Subject: [PATCH 318/427] fix: wrap the TerminalSizeQueue in an adapter

This fixes an issue with the updated interface dropped in https://github.com/kubernetes/kubectl/commit/ce4d90902a18a63e073e995bee271bb23c532c5e
---
 plugins/scheduler-k3s/k8s.go | 29 ++++++++++++++++++++++++-----
 1 file changed, 24 insertions(+), 5 deletions(-)

diff --git a/plugins/scheduler-k3s/k8s.go b/plugins/scheduler-k3s/k8s.go
index 14ee6002b..46cf92c87 100644
--- a/plugins/scheduler-k3s/k8s.go
+++ b/plugins/scheduler-k3s/k8s.go
@@ -489,15 +489,34 @@ func (k KubernetesClient) ExecCommand(ctx context.Context, input ExecCommandInpu
 		}
 
 		return exec.StreamWithContext(ctx, remotecommand.StreamOptions{
-			Stdin:             os.Stdin,
-			Stdout:            stdout,
-			Stderr:            stderr,
-			Tty:               actuallyTty,
-			TerminalSizeQueue: sizeQueue,
+			Stdin:  os.Stdin,
+			Stdout: stdout,
+			Stderr: stderr,
+			Tty:    actuallyTty,
+			TerminalSizeQueue: &terminalSizeQueueAdapter{
+				delegate: sizeQueue,
+			},
 		})
 	})
 }
 
+// terminalSizeQueueAdapter is an adapter for the terminal size queue to the remotecommand.TerminalSizeQueue interface
+type terminalSizeQueueAdapter struct {
+	delegate term.TerminalSizeQueue
+}
+
+// Next returns the next terminal size
+func (a *terminalSizeQueueAdapter) Next() *remotecommand.TerminalSize {
+	next := a.delegate.Next()
+	if next == nil {
+		return nil
+	}
+	return &remotecommand.TerminalSize{
+		Width:  next.Width,
+		Height: next.Height,
+	}
+}
+
 // GetPodLogsInput contains all the information needed to get the logs for a Kubernetes pod
 type GetLogsInput struct {
 	// Name is the Kubernetes pod name

From 337a56d45fd2e967cf93d059f8352a6b08d848ac Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Fri, 26 Dec 2025 06:59:05 +0000
Subject: [PATCH 319/427] Release 0.37.3

# History

## 0.37.3

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.3/bootstrap.sh
sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh
```

### Bug Fixes

- #8199: @josegonzalez Pass global build args as array when building nixpacks apps
- #8236: @josegonzalez Ensure the /etc/docker exists when interacting with it via postinst

### Documentation

- #8229: @kleutzinger Fix command syntax for removing docker options
- #8219: @deanmarano Add deanmarano to community plugins list
- #8205: @deanmarano Add DNS plugin to community plugins list

### Tests

- #8246: @josegonzalez Add tests to prove that Procfile tasks all work for every builder

### Dependencies

- #8243: @dependabot[bot] chore(deps): bump k8s.io/kubectl from 0.34.2 to 0.35.0 in /plugins/scheduler-k3s
- #8245: @dependabot[bot] chore(deps): bump github.com/go-resty/resty/v2 from 2.17.0 to 2.17.1 in /plugins/scheduler-k3s
- #8244: @dependabot[bot] chore(deps): bump k8s.io/kubernetes from 1.34.2 to 1.35.0 in /plugins/scheduler-k3s
- #8233: @dependabot[bot] chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 in /plugins/common
- #8241: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.32 to 2.11.33 in /plugins/scheduler-k3s
- #8240: @dependabot[bot] chore(deps): bump github.com/cert-manager/cert-manager from 1.19.1 to 1.19.2 in /plugins/scheduler-k3s
- #8239: @dependabot[bot] chore(deps): bump pyparsing from 3.2.5 to 3.3.1 in /docs/_build
- #8238: @dependabot[bot] chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /tests/apps/gogrpc
- #8237: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.18.2 to 2.18.3 in /plugins/scheduler-k3s
- #8235: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.2 to 3.19.4 in /plugins/scheduler-k3s
- #8232: @dependabot[bot] chore(deps): bump importlib-metadata from 8.7.0 to 8.7.1 in /docs/_build
- #8234: @dependabot[bot] chore(deps): bump k8s.io/client-go from 0.34.2 to 0.35.0 in /plugins/scheduler-k3s
- #8231: @dependabot[bot] chore(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 in /plugins/scheduler-k3s
- #8208: @dependabot[bot] chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 in /plugins/common
- #8201: @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in /plugins/common
- #8214: @dependabot[bot] chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /tests/apps/gogrpc
- #8216: @dependabot[bot] chore(deps): bump actions/download-artifact from 6 to 7
- #8217: @dependabot[bot] chore(deps): bump actions/upload-artifact from 5 to 6
- #8228: @dependabot[bot] chore(deps): bump soupsieve from 2.8 to 2.8.1 in /docs/_build
- #8226: @dependabot[bot] chore(deps): bump ruby from 3.4.7 to 3.4.8 in /tests/apps/dockerfile-entrypoint
- #8227: @dependabot[bot] chore(deps): bump mkdocs-material from 9.7.0 to 9.7.1 in /docs/_build
- #8224: @dependabot[bot] chore(deps): bump traefik from 3.6.4 to 3.6.5 in /plugins/traefik-vhosts
- #8225: @dependabot[bot] chore(deps): bump timberio/vector from 0.51.1-debian to 0.52.0-debian in /plugins/logs
- #8220: @dependabot[bot] chore(deps): bump python from 3.14.1-bookworm to 3.14.2-bookworm in /tests/apps/dockerfile-release
- #8221: @dependabot[bot] chore(deps): bump python from 3.14.1-alpine to 3.14.2-alpine in /docs/_build
- #8218: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.19 to 10.19.1 in /docs/_build
- #8215: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.18 to 10.19 in /docs/_build
- #8209: @dependabot[bot] chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 in /plugins/config
- #8210: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.2 in /plugins/scheduler-k3s
- #8211: @dependabot[bot] chore(deps): bump github.com/go-openapi/jsonpointer from 0.22.3 to 0.22.4 in /plugins/scheduler-k3s
- #8200: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.17.2 to 10.18 in /docs/_build
- #8202: @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in /plugins/scheduler-docker-local
- #8203: @dependabot[bot] chore(deps): bump traefik from 3.6.2 to 3.6.4 in /plugins/traefik-vhosts
- #8204: @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in /plugins/scheduler-k3s
---
 HISTORY.md                                 | 61 ++++++++++++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 ++++++++++----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/style.css                      | 10 ++--
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++-------
 docs/template.html                         | 36 ++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 57 files changed, 198 insertions(+), 137 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index b754a8fb7..8c7c4dc7c 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,66 @@
 # History
 
+## 0.37.3
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.3/bootstrap.sh
+sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8199: @josegonzalez Pass global build args as array when building nixpacks apps
+- #8236: @josegonzalez Ensure the /etc/docker exists when interacting with it via postinst
+
+### Documentation
+
+- #8229: @kleutzinger Fix command syntax for removing docker options
+- #8219: @deanmarano Add deanmarano to community plugins list
+- #8205: @deanmarano Add DNS plugin to community plugins list
+
+### Tests
+
+- #8246: @josegonzalez Add tests to prove that Procfile tasks all work for every builder
+
+### Dependencies
+
+- #8243: @dependabot[bot] chore(deps): bump k8s.io/kubectl from 0.34.2 to 0.35.0 in /plugins/scheduler-k3s
+- #8245: @dependabot[bot] chore(deps): bump github.com/go-resty/resty/v2 from 2.17.0 to 2.17.1 in /plugins/scheduler-k3s
+- #8244: @dependabot[bot] chore(deps): bump k8s.io/kubernetes from 1.34.2 to 1.35.0 in /plugins/scheduler-k3s
+- #8233: @dependabot[bot] chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 in /plugins/common
+- #8241: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.32 to 2.11.33 in /plugins/scheduler-k3s
+- #8240: @dependabot[bot] chore(deps): bump github.com/cert-manager/cert-manager from 1.19.1 to 1.19.2 in /plugins/scheduler-k3s
+- #8239: @dependabot[bot] chore(deps): bump pyparsing from 3.2.5 to 3.3.1 in /docs/_build
+- #8238: @dependabot[bot] chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /tests/apps/gogrpc
+- #8237: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.18.2 to 2.18.3 in /plugins/scheduler-k3s
+- #8235: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.2 to 3.19.4 in /plugins/scheduler-k3s
+- #8232: @dependabot[bot] chore(deps): bump importlib-metadata from 8.7.0 to 8.7.1 in /docs/_build
+- #8234: @dependabot[bot] chore(deps): bump k8s.io/client-go from 0.34.2 to 0.35.0 in /plugins/scheduler-k3s
+- #8231: @dependabot[bot] chore(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 in /plugins/scheduler-k3s
+- #8208: @dependabot[bot] chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 in /plugins/common
+- #8201: @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in /plugins/common
+- #8214: @dependabot[bot] chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /tests/apps/gogrpc
+- #8216: @dependabot[bot] chore(deps): bump actions/download-artifact from 6 to 7
+- #8217: @dependabot[bot] chore(deps): bump actions/upload-artifact from 5 to 6
+- #8228: @dependabot[bot] chore(deps): bump soupsieve from 2.8 to 2.8.1 in /docs/_build
+- #8226: @dependabot[bot] chore(deps): bump ruby from 3.4.7 to 3.4.8 in /tests/apps/dockerfile-entrypoint
+- #8227: @dependabot[bot] chore(deps): bump mkdocs-material from 9.7.0 to 9.7.1 in /docs/_build
+- #8224: @dependabot[bot] chore(deps): bump traefik from 3.6.4 to 3.6.5 in /plugins/traefik-vhosts
+- #8225: @dependabot[bot] chore(deps): bump timberio/vector from 0.51.1-debian to 0.52.0-debian in /plugins/logs
+- #8220: @dependabot[bot] chore(deps): bump python from 3.14.1-bookworm to 3.14.2-bookworm in /tests/apps/dockerfile-release
+- #8221: @dependabot[bot] chore(deps): bump python from 3.14.1-alpine to 3.14.2-alpine in /docs/_build
+- #8218: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.19 to 10.19.1 in /docs/_build
+- #8215: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.18 to 10.19 in /docs/_build
+- #8209: @dependabot[bot] chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 in /plugins/config
+- #8210: @dependabot[bot] chore(deps): bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.2 in /plugins/scheduler-k3s
+- #8211: @dependabot[bot] chore(deps): bump github.com/go-openapi/jsonpointer from 0.22.3 to 0.22.4 in /plugins/scheduler-k3s
+- #8200: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.17.2 to 10.18 in /docs/_build
+- #8202: @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in /plugins/scheduler-docker-local
+- #8203: @dependabot[bot] chore(deps): bump traefik from 3.6.2 to 3.6.4 in /plugins/traefik-vhosts
+- #8204: @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in /plugins/scheduler-k3s
+
 ## 0.37.2
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 95858cb8c..7112e1447 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.37.2/bootstrap.sh
-sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.3/bootstrap.sh
+sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index 4eefe6c86..aa11d1698 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.37.2
+Version: 0.37.3
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 1644db360..3d0b68d56 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.37.2 enabled    dokku core standard plugin
-  20_events            0.37.2 enabled    dokku core events logging plugin
-  app-json             0.37.2 enabled    dokku core app-json plugin
-  apps                 0.37.2 enabled    dokku core apps plugin
-  build-env            0.37.2 enabled    dokku core build-env plugin
-  buildpacks           0.37.2 enabled    dokku core buildpacks plugin
-  certs                0.37.2 enabled    dokku core certificate management plugin
-  checks               0.37.2 enabled    dokku core checks plugin
-  common               0.37.2 enabled    dokku core common plugin
-  config               0.37.2 enabled    dokku core config plugin
-  docker-options       0.37.2 enabled    dokku core docker-options plugin
-  domains              0.37.2 enabled    dokku core domains plugin
-  enter                0.37.2 enabled    dokku core enter plugin
-  git                  0.37.2 enabled    dokku core git plugin
-  logs                 0.37.2 enabled    dokku core logs plugin
-  network              0.37.2 enabled    dokku core network plugin
-  nginx-vhosts         0.37.2 enabled    dokku core nginx-vhosts plugin
-  plugin               0.37.2 enabled    dokku core plugin plugin
-  proxy                0.37.2 enabled    dokku core proxy plugin
-  ps                   0.37.2 enabled    dokku core ps plugin
-  repo                 0.37.2 enabled    dokku core repo plugin
-  resource             0.37.2 enabled    dokku core resource plugin
-  scheduler-docker-local 0.37.2 enabled    dokku core scheduler-docker-local plugin
-  shell                0.37.2 enabled    dokku core shell plugin
-  ssh-keys             0.37.2 enabled    dokku core ssh-keys plugin
-  storage              0.37.2 enabled    dokku core storage plugin
-  tags                 0.37.2 enabled    dokku core tags plugin
-  tar                  0.37.2 enabled    dokku core tar plugin
-  trace                0.37.2 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.3 enabled    dokku core standard plugin
+  20_events            0.37.3 enabled    dokku core events logging plugin
+  app-json             0.37.3 enabled    dokku core app-json plugin
+  apps                 0.37.3 enabled    dokku core apps plugin
+  build-env            0.37.3 enabled    dokku core build-env plugin
+  buildpacks           0.37.3 enabled    dokku core buildpacks plugin
+  certs                0.37.3 enabled    dokku core certificate management plugin
+  checks               0.37.3 enabled    dokku core checks plugin
+  common               0.37.3 enabled    dokku core common plugin
+  config               0.37.3 enabled    dokku core config plugin
+  docker-options       0.37.3 enabled    dokku core docker-options plugin
+  domains              0.37.3 enabled    dokku core domains plugin
+  enter                0.37.3 enabled    dokku core enter plugin
+  git                  0.37.3 enabled    dokku core git plugin
+  logs                 0.37.3 enabled    dokku core logs plugin
+  network              0.37.3 enabled    dokku core network plugin
+  nginx-vhosts         0.37.3 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.3 enabled    dokku core plugin plugin
+  proxy                0.37.3 enabled    dokku core proxy plugin
+  ps                   0.37.3 enabled    dokku core ps plugin
+  repo                 0.37.3 enabled    dokku core repo plugin
+  resource             0.37.3 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.3 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.3 enabled    dokku core shell plugin
+  ssh-keys             0.37.3 enabled    dokku core ssh-keys plugin
+  storage              0.37.3 enabled    dokku core storage plugin
+  tags                 0.37.3 enabled    dokku core tags plugin
+  tar                  0.37.3 enabled    dokku core tar plugin
+  trace                0.37.3 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index cdc2c64fb..a4b2b504c 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 219597bca..714f6d677 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.2\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/style.css b/docs/assets/style.css
index 5d490de52..887b4f8fd 100644
--- a/docs/assets/style.css
+++ b/docs/assets/style.css
@@ -25,9 +25,9 @@
 
   /* Avatar section darkmode fade */
   --avatar-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.2 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.3 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
   --avatar-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.2 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.3 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
 }
 
 body {
@@ -1191,15 +1191,15 @@ ul.fas li .fa-large:before {
 
   .getting-started::after {
     background: linear-gradient(0deg, rgba(52, 52, 87, 0.2) -40.97%, rgba(0, 0, 0, 0) 103.19%),
-      #0.37.2;
+      #0.37.3;
   }
 
   .tab-content {
-    background: #0.37.2;
+    background: #0.37.3;
   }
 
   .nav-tabs {
-    background: #0.37.2;
+    background: #0.37.3;
   }
 
   .powered-by_brands {
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index 274939f64..cd89fc1d7 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -34,6 +34,6 @@
     "0.34.9",
     "0.35.20",
     "0.36.11",
-    "0.37.2"
+    "0.37.3"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 8ee194040..f72d4ecb9 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.37.2-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.3-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 2a9adee8f..055902401 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.37.2
+docker pull dokku/dokku:0.37.3
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.37.2
+  dokku/dokku:0.37.3
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.37.2
+    image: dokku/dokku:0.37.3
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.37.2
+FROM dokku/dokku:0.37.3
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index 7909b185d..e54c783f2 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -31,8 +31,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.37.2/bootstrap.sh
-sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.3/bootstrap.sh
+sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index aad7dc71f..362f6e88a 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.2</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.3</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.37.2 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index cc7e06fe4..1798e83bd 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.2/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 360808464..ac108eeb2 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index bf85d8d27..359f29edc 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index 3b5530ef1..c6727b582 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index 9c61d9587..c8c056e2f 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index b294bfeb0..a0ff45d70 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index 033aa2daf..ef7308518 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 7ca04a806..7cac780d3 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index ccc627d32..b72b91eca 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 19a85a563..1fc8d90fd 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 31e7776fe..24361053c 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 9ffcaa306..3c11dc1fc 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index 1522edab5..ceeafeab1 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index 6a341e5e7..1468dc14e 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 68e5ab9f2..6447966b5 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index dcdc6c9ca..883cedaa4 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index 898f0e556..c585a3578 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 20e5452a1..7fcf28af6 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 693551af4..7dcfff0fe 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index 5381c24b9..bc8427692 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 545fbcfb9..debc1d8c5 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index e68ba6838..b72c3d810 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index 5900a1b28..283d9da36 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index 30215f8e9..f6d56afbb 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index b3fd6a28c..ccfac62f8 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index 5079288b8..10a7df306 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index d2f14da9d..f61510a83 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 085568f34..dc813f03f 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index b96ba6640..9507db5b2 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 5188fcae8..66bf3906f 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 9a8a44e87..753373743 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 1360bcdef..9393b214e 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index ca808a00c..f6fd9d5e7 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index e3fed3ac3..4e033b7b3 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 4df9daf97..7dd90d7d6 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 9de6dcba1..817f37697 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 0fd8e847d..16f5be15a 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index d60ba18a9..45be34a83 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index bbbb99308..5c7404424 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 4833dd7e5..316f870bd 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 3d172e877..fccbc37fe 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index faa744009..6c831c459 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index d3a46bd2d..414a5f166 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 581b68253..1b82d890d 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 6f0649cb7..9887c3bec 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.37.2"
+version = "0.37.3"
 [plugin.config]

From 4cbf4e9424c8d5d655d5411c02233f3e784a7854 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 26 Dec 2025 13:04:03 +0000
Subject: [PATCH 320/427] chore(deps): bump ruby in
 /tests/apps/dockerfile-entrypoint

Bumps ruby from 3.4.8 to 4.0.0.

---
updated-dependencies:
- dependency-name: ruby
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-entrypoint/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-entrypoint/Dockerfile b/tests/apps/dockerfile-entrypoint/Dockerfile
index b45a7c06a..65f928370 100644
--- a/tests/apps/dockerfile-entrypoint/Dockerfile
+++ b/tests/apps/dockerfile-entrypoint/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:3.4.8
+FROM ruby:4.0.0
 
 RUN mkdir /app
 WORKDIR /app

From 675529cb6f2635601e91af53b9acf0a836523bee Mon Sep 17 00:00:00 2001
From: Ostap Brehin <osbre@protonmail.com>
Date: Sat, 27 Dec 2025 18:35:57 +0000
Subject: [PATCH 321/427] Add `proxy-keepalive` to Nginx properties

---
 plugins/nginx-vhosts/command-functions        |  3 +++
 plugins/nginx-vhosts/functions                |  2 ++
 plugins/nginx-vhosts/internal-functions       | 21 +++++++++++++++++++
 plugins/nginx-vhosts/nginx_vhosts.go          | 17 +++++++++++++++
 .../src/nginx-property/nginx-property.go      |  6 ++++++
 plugins/nginx-vhosts/subcommands/set          |  6 +++---
 .../nginx-vhosts/templates/nginx.conf.sigil   |  1 +
 7 files changed, 53 insertions(+), 3 deletions(-)

diff --git a/plugins/nginx-vhosts/command-functions b/plugins/nginx-vhosts/command-functions
index a27ef914d..84490ec8a 100755
--- a/plugins/nginx-vhosts/command-functions
+++ b/plugins/nginx-vhosts/command-functions
@@ -110,6 +110,9 @@ cmd-nginx-report-single() {
     "--nginx-send-timeout: $(fn-nginx-send-timeout "$APP")"
     "--nginx-computed-send-timeout: $(fn-nginx-computed-send-timeout "$APP")"
     "--nginx-global-send-timeout: $(fn-nginx-global-send-timeout "$APP")"
+    "--nginx-proxy-keepalive: $(fn-nginx-proxy-keepalive "$APP")"
+    "--nginx-computed-proxy-keepalive: $(fn-nginx-computed-proxy-keepalive "$APP")"
+    "--nginx-global-proxy-keepalive: $(fn-nginx-global-proxy-keepalive "$APP")"
     "--nginx-underscore-in-headers: $(fn-nginx-underscore-in-headers "$APP")"
     "--nginx-computed-underscore-in-headers: $(fn-nginx-computed-underscore-in-headers "$APP")"
     "--nginx-global-underscore-in-headers: $(fn-nginx-global-underscore-in-headers "$APP")"
diff --git a/plugins/nginx-vhosts/functions b/plugins/nginx-vhosts/functions
index 2d190e613..0f81141c4 100755
--- a/plugins/nginx-vhosts/functions
+++ b/plugins/nginx-vhosts/functions
@@ -304,6 +304,7 @@ nginx_build_config() {
     local PROXY_BUFFERING="$(fn-nginx-computed-proxy-buffering "$APP")"
     local PROXY_BUFFERS="$(fn-nginx-computed-proxy-buffers "$APP")"
     local PROXY_BUSY_BUFFERS_SIZE="$(fn-nginx-computed-proxy-busy-buffers-size "$APP")"
+    local PROXY_KEEPALIVE="$(fn-nginx-computed-proxy-keepalive "$APP")"
 
     if [[ -z "$DOKKU_APP_LISTENERS" ]]; then
       dokku_log_warn_quiet "No web listeners specified for $APP"
@@ -370,6 +371,7 @@ nginx_build_config() {
         PROXY_BUFFERING="$PROXY_BUFFERING"
         PROXY_BUFFERS="$PROXY_BUFFERS"
         PROXY_BUSY_BUFFERS_SIZE="$PROXY_BUSY_BUFFERS_SIZE"
+        PROXY_KEEPALIVE="$PROXY_KEEPALIVE"
         NGINX_UNDERSCORE_IN_HEADERS="$NGINX_UNDERSCORE_IN_HEADERS"
         # Deprecated: Remove this after a few versions
         NGINX_PORT="$PROXY_PORT" NGINX_SSL_PORT="$PROXY_SSL_PORT"
diff --git a/plugins/nginx-vhosts/internal-functions b/plugins/nginx-vhosts/internal-functions
index 1950e199e..19186c4dd 100755
--- a/plugins/nginx-vhosts/internal-functions
+++ b/plugins/nginx-vhosts/internal-functions
@@ -509,6 +509,27 @@ fn-nginx-global-send-timeout() {
   fn-get-property --app "$APP" --global "send-timeout"
 }
 
+fn-nginx-proxy-keepalive() {
+  declare desc="get the configured upstream keepalive"
+  declare APP="$1"
+
+  fn-get-property --app "$APP" "proxy-keepalive"
+}
+
+fn-nginx-computed-proxy-keepalive() {
+  declare desc="get the computed upstream keepalive"
+  declare APP="$1"
+
+  fn-get-property --app "$APP" --computed "proxy-keepalive"
+}
+
+fn-nginx-global-proxy-keepalive() {
+  declare desc="get the global upstream keepalive"
+  declare APP="$1"
+
+  fn-get-property --app "$APP" --global "proxy-keepalive"
+}
+
 fn-nginx-underscore-in-headers() {
   declare desc="get the configured underscore in headers value"
   declare APP="$1"
diff --git a/plugins/nginx-vhosts/nginx_vhosts.go b/plugins/nginx-vhosts/nginx_vhosts.go
index 8c25ac1a7..6c552fd62 100644
--- a/plugins/nginx-vhosts/nginx_vhosts.go
+++ b/plugins/nginx-vhosts/nginx_vhosts.go
@@ -518,3 +518,20 @@ func ComputedXForwardedSSL(appName string) string {
 func GlobalXForwardedSSL() string {
 	return common.PropertyGetDefault("nginx", "--global", "x-forwarded-ssl", "")
 }
+
+func AppProxyKeepalive(appName string) string {
+	return common.PropertyGet("nginx", appName, "proxy-keepalive")
+}
+
+func ComputedProxyKeepalive(appName string) string {
+	appValue := AppProxyKeepalive(appName)
+	if appValue != "" {
+		return appValue
+	}
+
+	return GlobalProxyKeepalive()
+}
+
+func GlobalProxyKeepalive() string {
+	return common.PropertyGetDefault("nginx", "--global", "proxy-keepalive", "")
+}
diff --git a/plugins/nginx-vhosts/src/nginx-property/nginx-property.go b/plugins/nginx-vhosts/src/nginx-property/nginx-property.go
index 47c3bbd49..ce61ef4ae 100644
--- a/plugins/nginx-vhosts/src/nginx-property/nginx-property.go
+++ b/plugins/nginx-vhosts/src/nginx-property/nginx-property.go
@@ -83,6 +83,8 @@ func appValue(appName string, property string) string {
 		value = nginx_vhosts.AppProxyReadTimeout(appName)
 	case "proxy-send-timeout":
 		value = nginx_vhosts.AppProxySendTimeout(appName)
+	case "proxy-keepalive":
+		value = nginx_vhosts.AppProxyKeepalive(appName)
 	case "send-timeout":
 		value = nginx_vhosts.AppSendTimeout(appName)
 	case "underscore-in-headers":
@@ -151,6 +153,8 @@ func computedValue(appName string, property string) string {
 		value = nginx_vhosts.ComputedProxyReadTimeout(appName)
 	case "proxy-send-timeout":
 		value = nginx_vhosts.ComputedProxySendTimeout(appName)
+	case "proxy-keepalive":
+		value = nginx_vhosts.ComputedProxyKeepalive(appName)
 	case "send-timeout":
 		value = nginx_vhosts.ComputedSendTimeout(appName)
 	case "underscore-in-headers":
@@ -219,6 +223,8 @@ func globalValue(appName string, property string) string {
 		value = nginx_vhosts.GlobalProxyReadTimeout()
 	case "proxy-send-timeout":
 		value = nginx_vhosts.GlobalProxySendTimeout()
+	case "proxy-keepalive":
+		value = nginx_vhosts.GlobalProxyKeepalive()
 	case "send-timeout":
 		value = nginx_vhosts.GlobalSendTimeout()
 	case "underscore-in-headers":
diff --git a/plugins/nginx-vhosts/subcommands/set b/plugins/nginx-vhosts/subcommands/set
index 12cfaaab5..60ff463e4 100755
--- a/plugins/nginx-vhosts/subcommands/set
+++ b/plugins/nginx-vhosts/subcommands/set
@@ -9,13 +9,13 @@ cmd-nginx-set() {
   declare cmd="nginx:set"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP="$1" KEY="$2" VALUE="$3"
-  local VALID_KEYS=("access-log-format" "access-log-path" "bind-address-ipv4" "bind-address-ipv6" "client-body-timeout" "client-header-timeout" "client-max-body-size" "disable-custom-config" "error-log-path" "hsts" "hsts-include-subdomains" "hsts-preload" "hsts-max-age" "keepalive-timeout" "lingering-timeout" "nginx-conf-sigil-path" "nginx-service-command" "proxy-buffer-size" "proxy-buffering" "proxy-buffers" "proxy-busy-buffers-size" "proxy-connect-timeout" "proxy-read-timeout" "proxy-send-timeout" "send-timeout" "underscore-in-headers" "x-forwarded-for-value" "x-forwarded-port-value" "x-forwarded-proto-value" "x-forwarded-ssl")
-  local GLOBAL_KEYS=("access-log-format" "access-log-path" "bind-address-ipv4" "bind-address-ipv6" "client-body-timeout" "client-header-timeout" "client-max-body-size" "disable-custom-config" "error-log-path" "hsts-include-subdomains" "hsts-max-age" "hsts-preload" "hsts" "keepalive-timeout" "lingering-timeout" "nginx-conf-sigil-path" "nginx-service-command" "proxy-buffer-size" "proxy-buffering" "proxy-buffers" "proxy-busy-buffers-size" "proxy-connect-timeout" "proxy-read-timeout" "proxy-send-timeout" "send-timeout" "underscore-in-headers" "x-forwarded-for-value" "x-forwarded-port-value" "x-forwarded-proto-value" "x-forwarded-ssl")
+  local VALID_KEYS=("access-log-format" "access-log-path" "bind-address-ipv4" "bind-address-ipv6" "client-body-timeout" "client-header-timeout" "client-max-body-size" "disable-custom-config" "error-log-path" "hsts" "hsts-include-subdomains" "hsts-preload" "hsts-max-age" "keepalive-timeout" "lingering-timeout" "nginx-conf-sigil-path" "nginx-service-command" "proxy-buffer-size" "proxy-buffering" "proxy-buffers" "proxy-busy-buffers-size" "proxy-connect-timeout" "proxy-read-timeout" "proxy-send-timeout" "proxy-keepalive" "send-timeout" "underscore-in-headers" "x-forwarded-for-value" "x-forwarded-port-value" "x-forwarded-proto-value" "x-forwarded-ssl")
+  local GLOBAL_KEYS=("access-log-format" "access-log-path" "bind-address-ipv4" "bind-address-ipv6" "client-body-timeout" "client-header-timeout" "client-max-body-size" "disable-custom-config" "error-log-path" "hsts-include-subdomains" "hsts-max-age" "hsts-preload" "hsts" "keepalive-timeout" "lingering-timeout" "nginx-conf-sigil-path" "nginx-service-command" "proxy-buffer-size" "proxy-buffering" "proxy-buffers" "proxy-busy-buffers-size" "proxy-connect-timeout" "proxy-read-timeout" "proxy-send-timeout" "proxy-keepalive" "send-timeout" "underscore-in-headers" "x-forwarded-for-value" "x-forwarded-port-value" "x-forwarded-proto-value" "x-forwarded-ssl")
 
   [[ -z "$KEY" ]] && dokku_log_fail "No key specified"
 
   if ! fn-in-array "$KEY" "${VALID_KEYS[@]}"; then
-    dokku_log_fail "Invalid key specified, valid keys include: access-log-format, access-log-path, bind-address-ipv4, bind-address-ipv6, client-body-timeout, client-header-timeout, client-max-body-size, disable-custom-config, error-log-path, hsts, hsts-include-subdomains, hsts-preload, hsts-max-age, keepalive-timeout, lingering-timeout, nginx-conf-sigil-path, nginx-service-command, proxy-buffer-size, proxy-buffering, proxy-buffers, proxy-busy-buffers-size, proxy-connect-timeout, proxy-read-timeout, proxy-send-timeout, send-timeout, underscore-in-headers, x-forwarded-for-value, x-forwarded-port-value, x-forwarded-proto-value, x-forwarded-ssl"
+    dokku_log_fail "Invalid key specified, valid keys include: access-log-format, access-log-path, bind-address-ipv4, bind-address-ipv6, client-body-timeout, client-header-timeout, client-max-body-size, disable-custom-config, error-log-path, hsts, hsts-include-subdomains, hsts-preload, hsts-max-age, keepalive-timeout, lingering-timeout, nginx-conf-sigil-path, nginx-service-command, proxy-buffer-size, proxy-buffering, proxy-buffers, proxy-busy-buffers-size, proxy-connect-timeout, proxy-read-timeout, proxy-send-timeout, proxy-keepalive, send-timeout, underscore-in-headers, x-forwarded-for-value, x-forwarded-port-value, x-forwarded-proto-value, x-forwarded-ssl"
   fi
 
   if ! fn-in-array "$KEY" "${GLOBAL_KEYS[@]}"; then
diff --git a/plugins/nginx-vhosts/templates/nginx.conf.sigil b/plugins/nginx-vhosts/templates/nginx.conf.sigil
index 9c200882e..85c76cac1 100644
--- a/plugins/nginx-vhosts/templates/nginx.conf.sigil
+++ b/plugins/nginx-vhosts/templates/nginx.conf.sigil
@@ -212,6 +212,7 @@ server {
 {{ if $.DOKKU_APP_WEB_LISTENERS }}
 {{ range $upstream_port := $.PROXY_UPSTREAM_PORTS | split " " }}
 upstream {{ $.APP }}-{{ $upstream_port }} {
+{{ if $.PROXY_KEEPALIVE }}  keepalive {{ $.PROXY_KEEPALIVE }};{{ end }}
 {{ range $listeners := $.DOKKU_APP_WEB_LISTENERS | split " " }}
 {{ $listener_list := $listeners | split ":" }}
 {{ $listener_ip := index $listener_list 0 }}

From caff2e6b967ca3c009809f539ae2b325e958a9ab Mon Sep 17 00:00:00 2001
From: Ostap Brehin <osbre@protonmail.com>
Date: Sat, 27 Dec 2025 20:24:18 +0000
Subject: [PATCH 322/427] Document `proxy-keepalive` Nginx property

---
 docs/networking/proxies/nginx.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/networking/proxies/nginx.md b/docs/networking/proxies/nginx.md
index bd6b5d92a..9f9f72bbe 100644
--- a/docs/networking/proxies/nginx.md
+++ b/docs/networking/proxies/nginx.md
@@ -338,6 +338,7 @@ Changing these value globally or on a per-app basis will require rebuilding the
 | proxy-buffers             | `8 8k`                                | string  | Number and size of the buffers used for reading the proxied server response, for a single connection |
 | proxy-busy-buffers-size   | `16k`                                 | string  | Limits the total size of buffers that can be busy sending a response to the client while the response is not yet fully read. |
 | proxy-connect-timeout     | `60s`                                 | string  | Timeout (with units) for establishing a connection to your backend server           |
+| proxy-keepalive           | empty string                          | string  | Number of idle keepalive connections to upstream servers (disabled by default)      |
 | proxy-read-timeout        | `60s`                                 | string  | Timeout (with units) for reading response from your backend server                  |
 | proxy-send-timeout        | `60s`                                 | string  | Timeout (with units) for transmitting a request to your backend server              |
 | send-timeout              | `60s`                                 | string  | Timeout (with units) for transmitting a response to your the client                 |

From c84c0208a9690d40117f755a76950e03d7a2f4fb Mon Sep 17 00:00:00 2001
From: Ostap Brehin <osbre@protonmail.com>
Date: Sun, 28 Dec 2025 10:08:11 +0000
Subject: [PATCH 323/427] Nginx property `proxy-keepalive` must be an integer

---
 docs/networking/proxies/nginx.md     | 2 +-
 plugins/nginx-vhosts/subcommands/set | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/docs/networking/proxies/nginx.md b/docs/networking/proxies/nginx.md
index 9f9f72bbe..330f5fa0f 100644
--- a/docs/networking/proxies/nginx.md
+++ b/docs/networking/proxies/nginx.md
@@ -338,7 +338,7 @@ Changing these value globally or on a per-app basis will require rebuilding the
 | proxy-buffers             | `8 8k`                                | string  | Number and size of the buffers used for reading the proxied server response, for a single connection |
 | proxy-busy-buffers-size   | `16k`                                 | string  | Limits the total size of buffers that can be busy sending a response to the client while the response is not yet fully read. |
 | proxy-connect-timeout     | `60s`                                 | string  | Timeout (with units) for establishing a connection to your backend server           |
-| proxy-keepalive           | empty string                          | string  | Number of idle keepalive connections to upstream servers (disabled by default)      |
+| proxy-keepalive           | empty (disabled)                      | integer | Number of idle keepalive connections to upstream servers (disabled by default)      |
 | proxy-read-timeout        | `60s`                                 | string  | Timeout (with units) for reading response from your backend server                  |
 | proxy-send-timeout        | `60s`                                 | string  | Timeout (with units) for transmitting a request to your backend server              |
 | send-timeout              | `60s`                                 | string  | Timeout (with units) for transmitting a response to your the client                 |
diff --git a/plugins/nginx-vhosts/subcommands/set b/plugins/nginx-vhosts/subcommands/set
index 60ff463e4..e3118c4c7 100755
--- a/plugins/nginx-vhosts/subcommands/set
+++ b/plugins/nginx-vhosts/subcommands/set
@@ -25,6 +25,12 @@ cmd-nginx-set() {
     verify_app_name "$APP"
   fi
 
+  if [[ "$KEY" == "proxy-keepalive" ]] && [[ -n "$VALUE" ]]; then
+    if ! is_number "$VALUE"; then
+      dokku_log_fail "Invalid value for proxy-keepalive: must be an integer"
+    fi
+  fi
+
   if [[ -n "$VALUE" ]]; then
     dokku_log_info2_quiet "Setting ${KEY} to ${VALUE}"
     fn-plugin-property-write "nginx" "$APP" "$KEY" "$VALUE"

From 8c49dac90e92978f8e5210b3df7990f7a1594575 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 30 Dec 2025 13:08:32 +0000
Subject: [PATCH 324/427] chore(deps): bump traefik from 3.6.5 to 3.6.6 in
 /plugins/traefik-vhosts

Bumps traefik from 3.6.5 to 3.6.6.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index ec7264fda..da5b901a7 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.6.5
+FROM traefik:3.6.6

From 1d3a1a938ab52fe5581eab0bdc6e2e33d8de7023 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 30 Dec 2025 13:09:14 +0000
Subject: [PATCH 325/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.33 to 2.11.34.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/master/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.33...v2.11.34)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 8c67c98cd..1ca88658d 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.33
+	github.com/traefik/traefik/v2 v2.11.34
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.4
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 05559250d..77833b0f7 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -343,8 +343,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.33 h1:MPqN5W6Ui65lP2f/uCDH9TV8SvRPulp/7S/P2ESFDbI=
-github.com/traefik/traefik/v2 v2.11.33/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
+github.com/traefik/traefik/v2 v2.11.34 h1:TSMC60rpQHDaoYcnyiTQtHZimXenFZR+600MhHJEVoY=
+github.com/traefik/traefik/v2 v2.11.34/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From b9d5556b721cbaea1e43339be3a942aa3b42da59 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Jan 2026 13:04:14 +0000
Subject: [PATCH 326/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.19.1 to 10.20.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.19.1...10.20)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: '10.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 6802fbb16..3f03cf049 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.1
 mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
-pymdown-extensions==10.19.1
+pymdown-extensions==10.20
 pyparsing==3.3.1
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From ab4ab29a3247709a881370fca94219df86b2a223 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Jan 2026 19:19:39 +0000
Subject: [PATCH 327/427] chore(deps): bump qs from 6.14.0 to 6.14.1 in
 /tests/apps/checks-root

Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.0...v6.14.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/checks-root/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/checks-root/package-lock.json b/tests/apps/checks-root/package-lock.json
index 674a517ef..212a6ebc3 100644
--- a/tests/apps/checks-root/package-lock.json
+++ b/tests/apps/checks-root/package-lock.json
@@ -575,9 +575,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.14.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.0.tgz",
-      "integrity": "sha512-YWWTjgABSKcvs/nWBi9PycY/JiPJqOD4JA6o9Sej2AtvSGarXxKC3OQSk4pAarbdQlKAh5D4FCQkJNkW+GAn3w==",
+      "version": "6.14.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+      "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "side-channel": "^1.1.0"

From 3f492f2f255e9835a9996323500e9d99bb141533 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 3 Jan 2026 22:50:38 -0500
Subject: [PATCH 328/427] fix: install logrotate in the container

---
 Dockerfile     | 2 --
 debian/control | 2 +-
 tests.mk       | 7 ++++++-
 3 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index dead75810..fbd27685b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -48,7 +48,6 @@ RUN mkdir -p /etc/apt/keyrings \
   && apt-get update \
   && apt-get upgrade -y \
   && apt-get -y --no-install-recommends install lambda-builder "/tmp/dokku-$(dpkg --print-architecture).deb" \
-  && apt-get purge -y syslog-ng-core \
   && apt-get autoremove -y \
   && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
@@ -75,5 +74,4 @@ RUN \
   && mv /etc/my_init.d/00_regen_ssh_host_keys.sh /etc/my_init.d/15_regen_ssh_host_keys \
   && rm -f /etc/nginx/sites-enabled/default /usr/share/nginx/html/index.html /etc/my_init.d/10_syslog-ng.init \
   && rm -f /usr/local/openresty/nginx/conf/sites-enabled/default /usr/share/openresty/html/index.html \
-  && sed -i '/imklog/d' /etc/rsyslog.conf \
   && rm -f /var/log/btmp /var/log/wtmp /var/log/*log /var/log/apt/* /var/log/dokku/*.log /var/log/nginx/* /var/log/openresty/*
diff --git a/debian/control b/debian/control
index aa11d1698..9287d26c8 100644
--- a/debian/control
+++ b/debian/control
@@ -3,7 +3,7 @@ Version: 0.37.3
 Section: web
 Priority: optional
 Architecture: amd64
-Depends: apache2-utils, locales, git, cpio, cron, curl, man-db, netcat, sshcommand, docker-engine-cs (>= 19.03.0) | docker-engine (>= 19.03.0) | docker-io (>= 19.03.0) | docker.io (>= 19.03.0) | docker-ce (>= 19.03.0) | docker-ee (>= 19.03.0) | moby-engine, docker-compose-plugin | moby-compose, docker-buildx-plugin | moby-buildx, docker-container-healthchecker, docker-image-labeler, lambda-builder, net-tools, netrc, parallel, procfile-util, rsync, dos2unix, unzip, util-linux
+Depends: apache2-utils, locales, git, cpio, cron, curl, logrotate, man-db, netcat, sshcommand, docker-engine-cs (>= 19.03.0) | docker-engine (>= 19.03.0) | docker-io (>= 19.03.0) | docker.io (>= 19.03.0) | docker-ce (>= 19.03.0) | docker-ee (>= 19.03.0) | moby-engine, docker-compose-plugin | moby-compose, docker-buildx-plugin | moby-buildx, docker-container-healthchecker, docker-image-labeler, lambda-builder, net-tools, netrc, parallel, procfile-util, rsync, dos2unix, unzip, util-linux
 Recommends: herokuish, bash-completion, dokku-update, dokku-event-listener
 Pre-Depends: gliderlabs-sigil, jq, nginx (>= 1.8.0) | openresty, bind9-dnsutils, debconf, plugn, sudo, python3, rsyslog
 Maintainer: Jose Diaz-Gonzalez <dokku@josediazgonzalez.com>
diff --git a/tests.mk b/tests.mk
index da4a7200f..10de496b0 100644
--- a/tests.mk
+++ b/tests.mk
@@ -282,6 +282,11 @@ deploy-test-static:
 	@echo deploying static app...
 	cd tests && ./test_deploy ./apps/static $(DOKKU_DOMAIN)
 
+test-ci-binaries:
+	docker exec dokku bash -c "whereis logrotate" || { echo "logrotate not found" ; exit 1; }
+	docker exec dokku bash -c "whereis rsyslog" || { echo "rsyslog not found" ; exit 1; }
+	docker exec dokku bash -c "whereis syslog-ng" && { echo "syslog-ng found" ; exit 1; }
+
 deploy-tests:
 	@echo running deploy tests...
 	@$(QUIET) $(MAKE) deploy-test-checks-root
@@ -317,7 +322,7 @@ tests-ci-retry-failed:
 	tar xzf /tmp/bats-retry.tgz -C /usr/local/bin
 	bats-retry --execute test-results/bats
 
-test-ci-docker: setup-docker-deploy-tests deploy-test-checks-root deploy-test-config deploy-test-multi deploy-test-go-fail-predeploy deploy-test-go-fail-postdeploy
+test-ci-docker: setup-docker-deploy-tests deploy-test-checks-root deploy-test-config deploy-test-multi deploy-test-go-fail-predeploy deploy-test-go-fail-postdeploy test-ci-binaries
 
 generate-ssl-tars: generate-ssl-tar generate-ssl-sans-tar generate-ssl-wildcard-tar
 

From 1683cff5f9436d7af5f698db06f737fe30a07dbc Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 00:10:35 -0500
Subject: [PATCH 329/427] chore: re-purge syslog-ng-core

---
 Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index fbd27685b..dead75810 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -48,6 +48,7 @@ RUN mkdir -p /etc/apt/keyrings \
   && apt-get update \
   && apt-get upgrade -y \
   && apt-get -y --no-install-recommends install lambda-builder "/tmp/dokku-$(dpkg --print-architecture).deb" \
+  && apt-get purge -y syslog-ng-core \
   && apt-get autoremove -y \
   && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
@@ -74,4 +75,5 @@ RUN \
   && mv /etc/my_init.d/00_regen_ssh_host_keys.sh /etc/my_init.d/15_regen_ssh_host_keys \
   && rm -f /etc/nginx/sites-enabled/default /usr/share/nginx/html/index.html /etc/my_init.d/10_syslog-ng.init \
   && rm -f /usr/local/openresty/nginx/conf/sites-enabled/default /usr/share/openresty/html/index.html \
+  && sed -i '/imklog/d' /etc/rsyslog.conf \
   && rm -f /var/log/btmp /var/log/wtmp /var/log/*log /var/log/apt/* /var/log/dokku/*.log /var/log/nginx/* /var/log/openresty/*

From b1ebd694e6fa056fa51193c13597a57a9e4aa495 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 00:35:30 -0500
Subject: [PATCH 330/427] refactor: standardize on add_requirements_txt wrapper

---
 tests/unit/builder-nixpacks.bats | 11 ++---------
 tests/unit/builder-railpack.bats | 11 ++---------
 2 files changed, 4 insertions(+), 18 deletions(-)

diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index e66a6147a..72ba86a21 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -25,7 +25,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -55,7 +55,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -80,10 +80,3 @@ teardown() {
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
-
-inject_requirements_txt() {
-  local APP="$1"
-  local APP_REPO_DIR="$2"
-  [[ -z "$APP" ]] && local APP="$TEST_APP"
-  echo "flask" >>"$APP_REPO_DIR/requirements.txt"
-}
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index a904e553b..260062443 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -36,7 +36,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -66,7 +66,7 @@ teardown() {
   echo "status: $status"
   assert_success
 
-  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP inject_requirements_txt
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP add_requirements_txt
   echo "output: $output"
   echo "status: $status"
   assert_success
@@ -91,10 +91,3 @@ teardown() {
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
-
-inject_requirements_txt() {
-  local APP="$1"
-  local APP_REPO_DIR="$2"
-  [[ -z "$APP" ]] && local APP="$TEST_APP"
-  echo "flask" >>"$APP_REPO_DIR/requirements.txt"
-}

From 52c95d4317dfe6ea6cb22b83b5cb8657176320f4 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 00:55:49 -0500
Subject: [PATCH 331/427] tests: update test ruby app

---
 tests/apps/ruby/Gemfile      |  4 +--
 tests/apps/ruby/Gemfile.lock | 47 ++++++++++++++++++++++++++++--------
 2 files changed, 39 insertions(+), 12 deletions(-)

diff --git a/tests/apps/ruby/Gemfile b/tests/apps/ruby/Gemfile
index a4ed96f1f..c6fc5cf09 100644
--- a/tests/apps/ruby/Gemfile
+++ b/tests/apps/ruby/Gemfile
@@ -1,5 +1,5 @@
 source 'https://rubygems.org'
-ruby '2.6.8'
+ruby '4.0.0'
 
-gem 'sinatra', '~>3.2.0'
+gem 'sinatra', '~>4.2.1'
 gem 'thin'
diff --git a/tests/apps/ruby/Gemfile.lock b/tests/apps/ruby/Gemfile.lock
index 2c353f6ed..0207af4ad 100644
--- a/tests/apps/ruby/Gemfile.lock
+++ b/tests/apps/ruby/Gemfile.lock
@@ -1,32 +1,59 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    base64 (0.2.0)
+    base64 (0.3.0)
     daemons (1.4.1)
     eventmachine (1.2.7)
     logger (1.7.0)
-    mustermann (3.0.0)
+    mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
-    rack (2.2.20)
-    rack-protection (3.2.0)
+    rack (3.2.4)
+    rack-protection (4.2.1)
       base64 (>= 0.1.0)
-      rack (~> 2.2, >= 2.2.4)
+      logger (>= 1.6.0)
+      rack (>= 3.0.0, < 4)
+    rack-session (2.1.1)
+      base64 (>= 0.1.0)
+      rack (>= 3.0.0)
     ruby2_keywords (0.0.5)
-    sinatra (3.2.0)
+    sinatra (4.2.1)
+      logger (>= 1.6.0)
       mustermann (~> 3.0)
-      rack (~> 2.2, >= 2.2.4)
-      rack-protection (= 3.2.0)
+      rack (>= 3.0.0, < 4)
+      rack-protection (= 4.2.1)
+      rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
     thin (2.0.1)
       daemons (~> 1.0, >= 1.0.9)
       eventmachine (~> 1.0, >= 1.0.4)
       logger
       rack (>= 1, < 4)
-    tilt (2.3.0)
+    tilt (2.6.1)
 
 PLATFORMS
+  arm64-darwin-25
   ruby
 
 DEPENDENCIES
-  sinatra (~> 3.2.0)
+  sinatra (~> 4.2.1)
   thin
+
+CHECKSUMS
+  base64 (0.3.0) sha256=27337aeabad6ffae05c265c450490628ef3ebd4b67be58257393227588f5a97b
+  daemons (1.4.1) sha256=8fc76d76faec669feb5e455d72f35bd4c46dc6735e28c420afb822fac1fa9a1d
+  eventmachine (1.2.7) sha256=994016e42aa041477ba9cff45cbe50de2047f25dd418eba003e84f0d16560972
+  logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
+  mustermann (3.0.4) sha256=85fadcb6b3c6493a8b511b42426f904b7f27b282835502233dd154daab13aa22
+  rack (3.2.4) sha256=5d74b6f75082a643f43c1e76b419c40f0e5527fcfee1e669ac1e6b73c0ccb6f6
+  rack-protection (4.2.1) sha256=cf6e2842df8c55f5e4d1a4be015e603e19e9bc3a7178bae58949ccbb58558bac
+  rack-session (2.1.1) sha256=0b6dc07dea7e4b583f58a48e8b806d4c9f1c6c9214ebc202ec94562cbea2e4e9
+  ruby2_keywords (0.0.5) sha256=ffd13740c573b7301cf7a2e61fc857b2a8e3d3aff32545d6f8300d8bae10e3ef
+  sinatra (4.2.1) sha256=b7aeb9b11d046b552972ade834f1f9be98b185fa8444480688e3627625377080
+  thin (2.0.1) sha256=5bbde5648377f5c3864b5da7cd89a23b5c2d8d8bb9435719f6db49644bcdade9
+  tilt (2.6.1) sha256=35a99bba2adf7c1e362f5b48f9b581cce4edfba98117e34696dde6d308d84770
+
+RUBY VERSION
+  ruby 4.0.0
+
+BUNDLED WITH
+  4.0.3

From c19cb81c4bed34908d443a5247f0d4558f436e2d Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 00:39:06 -0500
Subject: [PATCH 332/427] tests: add a test to prove cron:run commands work as
 expected

Closes #8242
---
 tests/apps/python/app-cnb-cron.json | 29 ++++++++++++++++++++
 tests/apps/python/app-cnb.json      |  2 +-
 tests/apps/python/app-cron.json     | 29 ++++++++++++++++++++
 tests/unit/builder-dockerfile.bats  | 39 +++++++++++++++++++++++++++
 tests/unit/builder-herokuish.bats   | 38 ++++++++++++++++++++++++++
 tests/unit/builder-nixpacks.bats    | 41 ++++++++++++++++++++++++++++
 tests/unit/builder-pack.bats        | 42 +++++++++++++++++++++++++++++
 tests/unit/builder-railpack.bats    | 41 ++++++++++++++++++++++++++++
 8 files changed, 260 insertions(+), 1 deletion(-)
 create mode 100644 tests/apps/python/app-cnb-cron.json
 create mode 100644 tests/apps/python/app-cron.json

diff --git a/tests/apps/python/app-cnb-cron.json b/tests/apps/python/app-cnb-cron.json
new file mode 100644
index 000000000..54d9aa7a1
--- /dev/null
+++ b/tests/apps/python/app-cnb-cron.json
@@ -0,0 +1,29 @@
+{
+  "cron": [
+    {
+      "command": "python3 task.py some cron task",
+      "schedule": "5 5 5 5 5"
+    }
+  ],
+  "healthchecks": {
+    "web": [
+      {
+        "attempts": 2,
+        "content": "python/http.server",
+        "name": "check-1",
+        "path": "/",
+        "timeout": 5,
+        "type": "startup",
+        "wait": 2
+      }
+    ]
+  },
+  "scripts": {
+    "dokku": {
+      // this is a comment for the postdeploy script
+      "postdeploy": "touch /workspace/postdeploy.test",
+      // this is a comment for the predeploy script
+      "predeploy": "touch /workspace/predeploy.test"
+    }
+  }
+}
diff --git a/tests/apps/python/app-cnb.json b/tests/apps/python/app-cnb.json
index 85f5fe7f0..0d7012432 100644
--- a/tests/apps/python/app-cnb.json
+++ b/tests/apps/python/app-cnb.json
@@ -18,4 +18,4 @@
       "predeploy": "touch /workspace/predeploy.test"
     }
   }
-}
\ No newline at end of file
+}
diff --git a/tests/apps/python/app-cron.json b/tests/apps/python/app-cron.json
new file mode 100644
index 000000000..89f2543ce
--- /dev/null
+++ b/tests/apps/python/app-cron.json
@@ -0,0 +1,29 @@
+{
+  "cron": [
+    {
+      "command": "python3 task.py some cron task",
+      "schedule": "5 5 5 5 5"
+    }
+  ],
+  "healthchecks": {
+    "web": [
+      {
+        "attempts": 2,
+        "content": "python/http.server",
+        "name": "check-1",
+        "path": "/",
+        "timeout": 5,
+        "type": "startup",
+        "wait": 2
+      }
+    ]
+  },
+  "scripts": {
+    "dokku": {
+      // this is a comment for the postdeploy script
+      "postdeploy": "touch /app/postdeploy.test",
+      // this is a comment for the predeploy script
+      "predeploy": "touch /app/predeploy.test"
+    }
+  }
+}
\ No newline at end of file
diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index 73c5b9c99..d61e6379f 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -170,3 +170,42 @@ EOF
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
+
+@test "(builder-dockerfile) cron:run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected dockerfile"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP cron_run_wrapper
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'some', 'cron', 'task']"
+}
+
+cron_run_wrapper() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+
+  convert_to_dockerfile "$APP" "$APP_REPO_DIR"
+  mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
+}
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index fb1536f91..f794e3ca2 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -123,3 +123,41 @@ teardown() {
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
+
+@test "(builder-herokuish) cron:run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected herokuish"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP cron_run_wrapper
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'some', 'cron', 'task']"
+}
+
+cron_run_wrapper() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+
+  mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
+}
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index 72ba86a21..a7fd3ac6e 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -80,3 +80,44 @@ teardown() {
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
+
+@test "(builder-nixpacks) cron:run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected nixpacks"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP cron_run_wrapper
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains 'load build definition from Dockerfile' -1
+  assert_output_contains "SECRET_KEY: fjdkslafjdk"
+
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'some', 'cron', 'task']"
+}
+
+cron_run_wrapper() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+
+  add_requirements_txt "$APP" "$APP_REPO_DIR"
+  mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
+}
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 55c662149..d8081f48e 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -143,3 +143,45 @@ teardown() {
   assert_success
   assert_output_contains '"APP_RESPECTS_ENV_VARS": "1"'
 }
+
+@test "(builder-pack) cron:run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected pack"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP cron_run_wrapper
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains 'from cnb stack'
+  assert_output_contains 'Building with buildpack 1' 0
+  assert_output_contains 'Installing dependencies using pip'
+
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'some', 'cron', 'task']"
+}
+
+cron_run_wrapper() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+
+  add_requirements_txt "$APP" "$APP_REPO_DIR"
+  mv -f "$APP_REPO_DIR/app-cron-cnb.json" "$APP_REPO_DIR/app.json"
+}
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 260062443..3806b2508 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -91,3 +91,44 @@ teardown() {
   assert_success
   assert_output_contains "SECRET_KEY=fjdkslafjdk"
 }
+
+@test "(builder-railpack) cron:run" {
+  run /bin/bash -c "dokku config:set $TEST_APP SECRET_KEY=fjdkslafjdk"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku builder:set $TEST_APP selected railpack"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python dokku@$DOKKU_DOMAIN:$TEST_APP cron_run_wrapper
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains 'create mise config'
+  assert_output_contains 'Successfully built image in'
+
+  cron_id="$(dokku cron:list $TEST_APP --format json | jq -r '.[0].id')"
+  run /bin/bash -c "echo $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_exists
+
+  run /bin/bash -c "dokku cron:run $TEST_APP $cron_id"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "['task.py', 'some', 'cron', 'task']"
+}
+
+cron_run_wrapper() {
+  local APP="$1"
+  local APP_REPO_DIR="$2"
+  [[ -z "$APP" ]] && local APP="$TEST_APP"
+
+  add_requirements_txt "$APP" "$APP_REPO_DIR"
+  mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
+}

From 7cfabe1322853ba17d431701ea6b172c544f67b1 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 02:42:21 -0500
Subject: [PATCH 333/427] fix: move the correct file over

---
 tests/unit/builder-pack.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index d8081f48e..008b0b2a3 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -183,5 +183,5 @@ cron_run_wrapper() {
   [[ -z "$APP" ]] && local APP="$TEST_APP"
 
   add_requirements_txt "$APP" "$APP_REPO_DIR"
-  mv -f "$APP_REPO_DIR/app-cron-cnb.json" "$APP_REPO_DIR/app.json"
+  mv -f "$APP_REPO_DIR/app-cnb-cron.json‎" "$APP_REPO_DIR/app.json"
 }

From 8f9ca78642f9f89ac6d8a3403fd8d00e32391ab5 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 03:38:44 -0500
Subject: [PATCH 334/427] chore: debug

---
 tests/unit/builder-pack.bats | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 008b0b2a3..5b50d68bf 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -183,5 +183,6 @@ cron_run_wrapper() {
   [[ -z "$APP" ]] && local APP="$TEST_APP"
 
   add_requirements_txt "$APP" "$APP_REPO_DIR"
+  ls -lah "$APP_REPO_DIR"
   mv -f "$APP_REPO_DIR/app-cnb-cron.json‎" "$APP_REPO_DIR/app.json"
 }

From 9d603e1a45f64efa7d9b1b64d65c0cce290b9b17 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 20:45:52 -0500
Subject: [PATCH 335/427] fix: use real path when extracting files

---
 tests/unit/builder-dockerfile.bats | 1 +
 tests/unit/builder-herokuish.bats  | 1 +
 tests/unit/builder-nixpacks.bats   | 1 +
 tests/unit/builder-pack.bats       | 1 +
 tests/unit/builder-railpack.bats   | 1 +
 tests/unit/test_helper.bash        | 4 ++++
 6 files changed, 9 insertions(+)

diff --git a/tests/unit/builder-dockerfile.bats b/tests/unit/builder-dockerfile.bats
index d61e6379f..ca62231f0 100644
--- a/tests/unit/builder-dockerfile.bats
+++ b/tests/unit/builder-dockerfile.bats
@@ -205,6 +205,7 @@ cron_run_wrapper() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
 
   convert_to_dockerfile "$APP" "$APP_REPO_DIR"
   mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
diff --git a/tests/unit/builder-herokuish.bats b/tests/unit/builder-herokuish.bats
index f794e3ca2..a7a66bc11 100644
--- a/tests/unit/builder-herokuish.bats
+++ b/tests/unit/builder-herokuish.bats
@@ -158,6 +158,7 @@ cron_run_wrapper() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
 
   mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
 }
diff --git a/tests/unit/builder-nixpacks.bats b/tests/unit/builder-nixpacks.bats
index a7fd3ac6e..e7d97af25 100644
--- a/tests/unit/builder-nixpacks.bats
+++ b/tests/unit/builder-nixpacks.bats
@@ -117,6 +117,7 @@ cron_run_wrapper() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
 
   add_requirements_txt "$APP" "$APP_REPO_DIR"
   mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 5b50d68bf..8f25784c2 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -181,6 +181,7 @@ cron_run_wrapper() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
 
   add_requirements_txt "$APP" "$APP_REPO_DIR"
   ls -lah "$APP_REPO_DIR"
diff --git a/tests/unit/builder-railpack.bats b/tests/unit/builder-railpack.bats
index 3806b2508..27cf02663 100644
--- a/tests/unit/builder-railpack.bats
+++ b/tests/unit/builder-railpack.bats
@@ -128,6 +128,7 @@ cron_run_wrapper() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
 
   add_requirements_txt "$APP" "$APP_REPO_DIR"
   mv -f "$APP_REPO_DIR/app-cron.json" "$APP_REPO_DIR/app.json"
diff --git a/tests/unit/test_helper.bash b/tests/unit/test_helper.bash
index 95e89376d..3b581565a 100644
--- a/tests/unit/test_helper.bash
+++ b/tests/unit/test_helper.bash
@@ -574,6 +574,8 @@ add_requirements_txt() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
+
   echo "flask" >>"$APP_REPO_DIR/requirements.txt"
 }
 
@@ -632,6 +634,8 @@ convert_to_dockerfile() {
   local APP="$1"
   local APP_REPO_DIR="$2"
   [[ -z "$APP" ]] && local APP="$TEST_APP"
+  APP_REPO_DIR="$(realpath "$APP_REPO_DIR")"
+
   mv "$APP_REPO_DIR/dockerfile.Dockerfile" "$APP_REPO_DIR/Dockerfile"
 }
 

From f64b87cc279e93530ab71838755f6c0e30120326 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 22:03:59 -0500
Subject: [PATCH 336/427] fix: use correct path for app-cnb-cron.json

---
 tests/unit/builder-pack.bats | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/unit/builder-pack.bats b/tests/unit/builder-pack.bats
index 8f25784c2..3721b2e62 100644
--- a/tests/unit/builder-pack.bats
+++ b/tests/unit/builder-pack.bats
@@ -185,5 +185,5 @@ cron_run_wrapper() {
 
   add_requirements_txt "$APP" "$APP_REPO_DIR"
   ls -lah "$APP_REPO_DIR"
-  mv -f "$APP_REPO_DIR/app-cnb-cron.json‎" "$APP_REPO_DIR/app.json"
+  mv -f "$APP_REPO_DIR/app-cnb-cron.json" "$APP_REPO_DIR/app.json"
 }

From 7033a90659fdd65b90ea0c067bdd9a1c2a33239c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 4 Jan 2026 23:52:27 -0500
Subject: [PATCH 337/427] fix: drop check

---
 tests.mk | 1 -
 1 file changed, 1 deletion(-)

diff --git a/tests.mk b/tests.mk
index 10de496b0..c31d42db0 100644
--- a/tests.mk
+++ b/tests.mk
@@ -285,7 +285,6 @@ deploy-test-static:
 test-ci-binaries:
 	docker exec dokku bash -c "whereis logrotate" || { echo "logrotate not found" ; exit 1; }
 	docker exec dokku bash -c "whereis rsyslog" || { echo "rsyslog not found" ; exit 1; }
-	docker exec dokku bash -c "whereis syslog-ng" && { echo "syslog-ng found" ; exit 1; }
 
 deploy-tests:
 	@echo running deploy tests...

From 10e835f6feac6e02cbc2a057a69dca76372f891b Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Mon, 5 Jan 2026 04:54:10 +0000
Subject: [PATCH 338/427] Release 0.37.4

# History

## 0.37.4

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.4/bootstrap.sh
sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh
```

### Bug Fixes

- #8168: @josegonzalez Install logrotate in the container

### Tests

- #8254: @josegonzalez Add a test to prove cron:run commands work as expected
- #8255: @josegonzalez Update test ruby app

### Dependencies

- #8252: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.19.1 to 10.20 in /docs/_build
- #8253: @dependabot[bot] chore(deps): bump qs from 6.14.0 to 6.14.1 in /tests/apps/checks-root
- #8249: @dependabot[bot] chore(deps): bump traefik from 3.6.5 to 3.6.6 in /plugins/traefik-vhosts
- #8250: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.33 to 2.11.34 in /plugins/scheduler-k3s
- #8247: @dependabot[bot] chore(deps): bump ruby from 3.4.8 to 4.0.0 in /tests/apps/dockerfile-entrypoint

### Other

- #8248: @osbre Add `proxy-keepalive` to Nginx properties
---
 HISTORY.md                                 | 30 +++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/style.css                      | 10 ++--
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 57 files changed, 167 insertions(+), 137 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index 8c7c4dc7c..0339134ba 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,35 @@
 # History
 
+## 0.37.4
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.4/bootstrap.sh
+sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8168: @josegonzalez Install logrotate in the container
+
+### Tests
+
+- #8254: @josegonzalez Add a test to prove cron:run commands work as expected
+- #8255: @josegonzalez Update test ruby app
+
+### Dependencies
+
+- #8252: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.19.1 to 10.20 in /docs/_build
+- #8253: @dependabot[bot] chore(deps): bump qs from 6.14.0 to 6.14.1 in /tests/apps/checks-root
+- #8249: @dependabot[bot] chore(deps): bump traefik from 3.6.5 to 3.6.6 in /plugins/traefik-vhosts
+- #8250: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.33 to 2.11.34 in /plugins/scheduler-k3s
+- #8247: @dependabot[bot] chore(deps): bump ruby from 3.4.8 to 4.0.0 in /tests/apps/dockerfile-entrypoint
+
+### Other
+
+- #8248: @osbre Add `proxy-keepalive` to Nginx properties
+
 ## 0.37.3
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 7112e1447..c1e53c8af 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.37.3/bootstrap.sh
-sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.4/bootstrap.sh
+sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index 9287d26c8..e5c7ea67c 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.37.3
+Version: 0.37.4
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 3d0b68d56..4f155dff6 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.37.3 enabled    dokku core standard plugin
-  20_events            0.37.3 enabled    dokku core events logging plugin
-  app-json             0.37.3 enabled    dokku core app-json plugin
-  apps                 0.37.3 enabled    dokku core apps plugin
-  build-env            0.37.3 enabled    dokku core build-env plugin
-  buildpacks           0.37.3 enabled    dokku core buildpacks plugin
-  certs                0.37.3 enabled    dokku core certificate management plugin
-  checks               0.37.3 enabled    dokku core checks plugin
-  common               0.37.3 enabled    dokku core common plugin
-  config               0.37.3 enabled    dokku core config plugin
-  docker-options       0.37.3 enabled    dokku core docker-options plugin
-  domains              0.37.3 enabled    dokku core domains plugin
-  enter                0.37.3 enabled    dokku core enter plugin
-  git                  0.37.3 enabled    dokku core git plugin
-  logs                 0.37.3 enabled    dokku core logs plugin
-  network              0.37.3 enabled    dokku core network plugin
-  nginx-vhosts         0.37.3 enabled    dokku core nginx-vhosts plugin
-  plugin               0.37.3 enabled    dokku core plugin plugin
-  proxy                0.37.3 enabled    dokku core proxy plugin
-  ps                   0.37.3 enabled    dokku core ps plugin
-  repo                 0.37.3 enabled    dokku core repo plugin
-  resource             0.37.3 enabled    dokku core resource plugin
-  scheduler-docker-local 0.37.3 enabled    dokku core scheduler-docker-local plugin
-  shell                0.37.3 enabled    dokku core shell plugin
-  ssh-keys             0.37.3 enabled    dokku core ssh-keys plugin
-  storage              0.37.3 enabled    dokku core storage plugin
-  tags                 0.37.3 enabled    dokku core tags plugin
-  tar                  0.37.3 enabled    dokku core tar plugin
-  trace                0.37.3 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.4 enabled    dokku core standard plugin
+  20_events            0.37.4 enabled    dokku core events logging plugin
+  app-json             0.37.4 enabled    dokku core app-json plugin
+  apps                 0.37.4 enabled    dokku core apps plugin
+  build-env            0.37.4 enabled    dokku core build-env plugin
+  buildpacks           0.37.4 enabled    dokku core buildpacks plugin
+  certs                0.37.4 enabled    dokku core certificate management plugin
+  checks               0.37.4 enabled    dokku core checks plugin
+  common               0.37.4 enabled    dokku core common plugin
+  config               0.37.4 enabled    dokku core config plugin
+  docker-options       0.37.4 enabled    dokku core docker-options plugin
+  domains              0.37.4 enabled    dokku core domains plugin
+  enter                0.37.4 enabled    dokku core enter plugin
+  git                  0.37.4 enabled    dokku core git plugin
+  logs                 0.37.4 enabled    dokku core logs plugin
+  network              0.37.4 enabled    dokku core network plugin
+  nginx-vhosts         0.37.4 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.4 enabled    dokku core plugin plugin
+  proxy                0.37.4 enabled    dokku core proxy plugin
+  ps                   0.37.4 enabled    dokku core ps plugin
+  repo                 0.37.4 enabled    dokku core repo plugin
+  resource             0.37.4 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.4 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.4 enabled    dokku core shell plugin
+  ssh-keys             0.37.4 enabled    dokku core ssh-keys plugin
+  storage              0.37.4 enabled    dokku core storage plugin
+  tags                 0.37.4 enabled    dokku core tags plugin
+  tar                  0.37.4 enabled    dokku core tar plugin
+  trace                0.37.4 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index a4b2b504c..52a5b04b2 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 714f6d677..b7276272f 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.3\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/style.css b/docs/assets/style.css
index 887b4f8fd..67588c87d 100644
--- a/docs/assets/style.css
+++ b/docs/assets/style.css
@@ -25,9 +25,9 @@
 
   /* Avatar section darkmode fade */
   --avatar-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.3 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.4 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
   --avatar-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.3 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.4 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
 }
 
 body {
@@ -1191,15 +1191,15 @@ ul.fas li .fa-large:before {
 
   .getting-started::after {
     background: linear-gradient(0deg, rgba(52, 52, 87, 0.2) -40.97%, rgba(0, 0, 0, 0) 103.19%),
-      #0.37.3;
+      #0.37.4;
   }
 
   .tab-content {
-    background: #0.37.3;
+    background: #0.37.4;
   }
 
   .nav-tabs {
-    background: #0.37.3;
+    background: #0.37.4;
   }
 
   .powered-by_brands {
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index cd89fc1d7..3f7143d53 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -34,6 +34,6 @@
     "0.34.9",
     "0.35.20",
     "0.36.11",
-    "0.37.3"
+    "0.37.4"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index f72d4ecb9..7ff4c3066 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.37.3-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.4-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 055902401..89fe2a0a5 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.37.3
+docker pull dokku/dokku:0.37.4
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.37.3
+  dokku/dokku:0.37.4
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.37.3
+    image: dokku/dokku:0.37.4
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.37.3
+FROM dokku/dokku:0.37.4
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index e54c783f2..eeeeb769e 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -31,8 +31,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.37.3/bootstrap.sh
-sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.4/bootstrap.sh
+sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index 362f6e88a..c07a74c95 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.3</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.4</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.37.3 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 1798e83bd..620bf6ac8 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.3/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index ac108eeb2..3a42cbac1 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index 359f29edc..cbd3b65e7 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index c6727b582..3013f1724 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index c8c056e2f..c70ba5bb4 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index a0ff45d70..b6dffc5f1 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index ef7308518..adfa6584b 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 7cac780d3..959554e2b 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index b72b91eca..78ac38794 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index 1fc8d90fd..d5f9f80c4 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 24361053c..b2628c42c 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 3c11dc1fc..f7d726a6c 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index ceeafeab1..36883c545 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index 1468dc14e..dfe3607f3 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 6447966b5..bae303d6f 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 883cedaa4..8d2ac0f02 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index c585a3578..f6b9535ee 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 7fcf28af6..4cb51473b 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 7dcfff0fe..66afaeaaf 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index bc8427692..37a65ffdf 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index debc1d8c5..951eac3d3 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index b72c3d810..26e4eb0d6 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index 283d9da36..360119456 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index f6d56afbb..1a8887f15 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index ccfac62f8..82987b253 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index 10a7df306..83f550b15 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index f61510a83..583c8c91b 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index dc813f03f..029362896 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 9507db5b2..4ac81dddd 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 66bf3906f..077a143a7 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 753373743..0bcefb034 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 9393b214e..94ccd661e 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index f6fd9d5e7..858687636 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index 4e033b7b3..20faac340 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 7dd90d7d6..196de044c 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 817f37697..9eecc57d5 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 16f5be15a..c367ecdd4 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index 45be34a83..a42a17174 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index 5c7404424..e282082b2 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 316f870bd..aac0664bc 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index fccbc37fe..69b9a9670 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 6c831c459..2cd30603e 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 414a5f166..7ba9cb403 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 1b82d890d..40994d799 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 9887c3bec..6592b6034 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.37.3"
+version = "0.37.4"
 [plugin.config]

From 20c45ffb6138db3097400863f4ec792906a1b67a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Jan 2026 13:03:44 +0000
Subject: [PATCH 339/427] chore(deps): bump luizm/action-sh-checker from 0.9.0
 to 0.10.0

Bumps [luizm/action-sh-checker](https://github.com/luizm/action-sh-checker) from 0.9.0 to 0.10.0.
- [Release notes](https://github.com/luizm/action-sh-checker/releases)
- [Commits](https://github.com/luizm/action-sh-checker/compare/17bd25a6ee188d2b91f677060038f4ba37ba14b2...883217215b11c1fabbf00eb1a9a041f62d74c744)

---
updated-dependencies:
- dependency-name: luizm/action-sh-checker
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/lint.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 4768ac828..3abf5ef8b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -78,7 +78,7 @@ jobs:
       - name: Clone
         uses: actions/checkout@v6
       - name: Run shfmt
-        uses: luizm/action-sh-checker@17bd25a6ee188d2b91f677060038f4ba37ba14b2
+        uses: luizm/action-sh-checker@883217215b11c1fabbf00eb1a9a041f62d74c744
         # v0.5.0 => edd0e45ecff35b05f162052b50df50976c1b74fc
         env:
           SHFMT_OPTS: -l -bn -ci -i 2 -d

From 290e3201089af13b43bccb256030ad7a55287322 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Jan 2026 13:10:46 +0000
Subject: [PATCH 340/427] chore(deps): bump dj-database-url in
 /tests/apps/dockerfile-release

Bumps [dj-database-url](https://github.com/jazzband/dj-database-url) from 3.0.1 to 3.1.0.
- [Release notes](https://github.com/jazzband/dj-database-url/releases)
- [Changelog](https://github.com/jazzband/dj-database-url/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jazzband/dj-database-url/compare/v3.0.1...v3.1.0)

---
updated-dependencies:
- dependency-name: dj-database-url
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index f41cef640..323477c69 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -26,11 +26,12 @@
         },
         "dj-database-url": {
             "hashes": [
-                "sha256:43950018e1eeea486bf11136384aec0fe55b29fe6fd8a44553231b85661d9383",
-                "sha256:8994961efb888fc6bf8c41550870c91f6f7691ca751888ebaa71442b7f84eff8"
+                "sha256:155a56fbbecbaaf1348ccd73bf29138b4c9988363ba08261a0f0145e392e638c",
+                "sha256:d80218426b83f9302c8d27d4fccf52de5cf0cab179f0645fb2839f37605d1353"
             ],
             "index": "pypi",
-            "version": "==3.0.1"
+            "markers": "python_version >= '3.10'",
+            "version": "==3.1.0"
         },
         "django": {
             "hashes": [
@@ -147,11 +148,11 @@
         },
         "sqlparse": {
             "hashes": [
-                "sha256:4396a7d3cf1cd679c1be976cf3dc6e0a51d0111e87787e7a8d780e7d5a998f9e",
-                "sha256:99a9f0314977b76d776a0fcb8554de91b9bb8a18560631d6bc48721d07023dcb"
+                "sha256:12a08b3bf3eec877c519589833aed092e2444e68240a3577e8e26148acc7b1ba",
+                "sha256:e20d4a9b0b8585fdf63b10d30066c7c94c5d7a7ec47c889a2d83a3caa93ff28e"
             ],
             "markers": "python_version >= '3.8'",
-            "version": "==0.5.4"
+            "version": "==0.5.5"
         },
         "whitenoise": {
             "hashes": [

From df8b725081769ecaf7f5016be78c054b91c84742 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Wed, 7 Jan 2026 01:15:39 -0500
Subject: [PATCH 341/427] feat: add support for dns-01 challenge mode when
 using traefik

Closes #6423
---
 docs/networking/proxies/traefik.md            |  43 +++
 plugins/common/property-functions             |   6 +
 plugins/common/src/prop/prop.go               |  13 +
 plugins/traefik-vhosts/command-functions      |  47 +++-
 plugins/traefik-vhosts/internal-functions     |  23 ++
 plugins/traefik-vhosts/subcommands/set        |  26 +-
 .../templates/compose.yml.sigil               |  19 +-
 tests/unit/traefik.bats                       | 250 ++++++++++++++++++
 8 files changed, 416 insertions(+), 11 deletions(-)

diff --git a/docs/networking/proxies/traefik.md b/docs/networking/proxies/traefik.md
index a6718f0fa..5e13daa1a 100644
--- a/docs/networking/proxies/traefik.md
+++ b/docs/networking/proxies/traefik.md
@@ -199,6 +199,41 @@ dokku traefik:set --global letsencrypt-server https://acme-staging-v02.api.letse
 
 After enabling, the Traefik container will need to be restarted and apps will need to be rebuilt to retrieve certificates from the new server.
 
+#### Switching to DNS-01 challenge mode
+
+By default, Traefik uses TLS-ALPN-01 challenge for obtaining certificates. To switch to DNS-01 challenge mode (useful for wildcard certificates or when port 443 is not accessible), you need to:
+
+1. Set the challenge mode to `dns`:
+
+```shell
+dokku traefik:set --global challenge-mode dns
+```
+
+2. Set your DNS provider:
+
+```shell
+dokku traefik:set --global dns-provider cloudflare
+```
+
+3. Configure the required environment variables for your DNS provider. Each DNS provider requires specific environment variables. The variable names should be prefixed with `dns-provider-`:
+
+```shell
+dokku traefik:set --global dns-provider-cf_api_email user@example.com
+dokku traefik:set --global dns-provider-cf_api_key your-api-key
+```
+
+The `dns-provider-` prefix will be stripped and the variable name will be uppercased when passed to the Traefik container. For example, `dns-provider-cf_api_email` becomes `CF_API_EMAIL`.
+
+After configuring, the Traefik container will need to be restarted and apps will need to be rebuilt.
+
+Refer to the [Traefik DNS Challenge documentation](https://doc.traefik.io/traefik/https/acme/#dnschallenge) for the list of supported DNS providers and their required environment variables.
+
+To switch back to TLS challenge mode:
+
+```shell
+dokku traefik:set --global challenge-mode tls
+```
+
 ### API Access
 
 Traefik exposes an API and Dashboard, which Dokku disables by default for security reasons. It can be exposed and customized as described below.
@@ -264,7 +299,9 @@ dokku traefik:report
        Traefik api vhost:             traefik.dokku.me
        Traefik basic auth password:   password
        Traefik basic auth username:   user
+       Traefik challenge mode:        tls
        Traefik dashboard enabled:     false
+       Traefik dns provider:
        Traefik image:                 traefik:v2.8
        Traefik letsencrypt email:
        Traefik letsencrypt server:
@@ -274,7 +311,9 @@ dokku traefik:report
        Traefik api vhost:             traefik.dokku.me
        Traefik basic auth password:   password
        Traefik basic auth username:   user
+       Traefik challenge mode:        tls
        Traefik dashboard enabled:     false
+       Traefik dns provider:
        Traefik image:                 traefik:v2.8
        Traefik letsencrypt email:
        Traefik letsencrypt server:
@@ -284,7 +323,9 @@ dokku traefik:report
        Traefik api vhost:             traefik.dokku.me
        Traefik basic auth password:   password
        Traefik basic auth username:   user
+       Traefik challenge mode:        tls
        Traefik dashboard enabled:     false
+       Traefik dns provider:
        Traefik image:                 traefik:v2.8
        Traefik letsencrypt email:
        Traefik letsencrypt server:
@@ -303,7 +344,9 @@ dokku traefik:report node-js-app
        Traefik api vhost:             traefik.dokku.me
        Traefik basic auth password:   password
        Traefik basic auth username:   user
+       Traefik challenge mode:        tls
        Traefik dashboard enabled:     false
+       Traefik dns provider:
        Traefik image:                 traefik:v2.8
        Traefik letsencrypt email:
        Traefik letsencrypt server:
diff --git a/plugins/common/property-functions b/plugins/common/property-functions
index 00d8a6a11..b273ddfa4 100755
--- a/plugins/common/property-functions
+++ b/plugins/common/property-functions
@@ -39,6 +39,12 @@ fn-plugin-property-get-all() {
   "$PLUGIN_CORE_AVAILABLE_PATH/common/prop" "get-all" "$PLUGIN" "$APP"
 }
 
+fn-plugin-property-get-all-by-prefix() {
+  declare desc="returns a map of all properties for a given app with a specified prefix"
+  declare PLUGIN="$1" APP="$2" PREFIX="$3"
+  "$PLUGIN_CORE_AVAILABLE_PATH/common/prop" "get-all-by-prefix" "$PLUGIN" "$APP" "$PREFIX"
+}
+
 fn-plugin-property-get-default() {
   declare desc="returns the value for a given property with a specified default value"
   declare PLUGIN="$1" APP="$2" KEY="$3" DEFAULT="$4"
diff --git a/plugins/common/src/prop/prop.go b/plugins/common/src/prop/prop.go
index 5c2a87c78..f5b788dc3 100644
--- a/plugins/common/src/prop/prop.go
+++ b/plugins/common/src/prop/prop.go
@@ -78,6 +78,19 @@ func main() {
 			os.Exit(1)
 		}
 
+		for key, value := range values {
+			fmt.Println(fmt.Sprintf("%s %s", key, strings.TrimSuffix(value, "\n")))
+		}
+
+	case "get-all-by-prefix":
+		appName := flag.Arg(2)
+		prefix := flag.Arg(3)
+		values, err := common.PropertyGetAllByPrefix(pluginName, appName, prefix)
+		if err != nil {
+			fmt.Fprintln(os.Stderr, err.Error())
+			os.Exit(1)
+		}
+
 		for key, value := range values {
 			fmt.Println(fmt.Sprintf("%s %s", key, strings.TrimSuffix(value, "\n")))
 		}
diff --git a/plugins/traefik-vhosts/command-functions b/plugins/traefik-vhosts/command-functions
index f468a0fc9..d2d28da0c 100755
--- a/plugins/traefik-vhosts/command-functions
+++ b/plugins/traefik-vhosts/command-functions
@@ -34,8 +34,16 @@ cmd-traefik-report() {
   declare cmd="traefik:report"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP="$1" INFO_FLAG="$2"
+  local FORMAT="stdout"
 
-  if [[ -n "$APP" ]] && [[ "$APP" == --* ]]; then
+  if [[ -n "$APP" ]] && [[ "$APP" == "--format" ]]; then
+    FORMAT="$INFO_FLAG"
+    APP=""
+    INFO_FLAG=""
+  elif [[ -n "$INFO_FLAG" ]] && [[ "$INFO_FLAG" == "--format" ]]; then
+    FORMAT="$3"
+    INFO_FLAG=""
+  elif [[ -n "$APP" ]] && [[ "$APP" == --* ]]; then
     INFO_FLAG="$APP"
     APP=""
   fi
@@ -46,15 +54,15 @@ cmd-traefik-report() {
 
   if [[ -z "$APP" ]]; then
     for app in $(dokku_apps); do
-      cmd-traefik-report-single "$app" "$INFO_FLAG" | tee || true
+      cmd-traefik-report-single "$app" "$INFO_FLAG" "$FORMAT" | tee || true
     done
   else
-    cmd-traefik-report-single "$APP" "$INFO_FLAG"
+    cmd-traefik-report-single "$APP" "$INFO_FLAG" "$FORMAT"
   fi
 }
 
 cmd-traefik-report-single() {
-  declare APP="$1" INFO_FLAG="$2"
+  declare APP="$1" INFO_FLAG="$2" FORMAT="${3:-stdout}"
   if [[ "$INFO_FLAG" == "true" ]]; then
     INFO_FLAG=""
   fi
@@ -64,7 +72,9 @@ cmd-traefik-report-single() {
     "--traefik-api-vhost: $(fn-traefik-api-vhost)"
     "--traefik-basic-auth-password: $(fn-traefik-basic-auth-password)"
     "--traefik-basic-auth-username: $(fn-traefik-basic-auth-username)"
+    "--traefik-challenge-mode: $(fn-traefik-challenge-mode)"
     "--traefik-dashboard-enabled: $(fn-traefik-dashboard-enabled)"
+    "--traefik-dns-provider: $(fn-traefik-dns-provider)"
     "--traefik-image: $(fn-traefik-image)"
     "--traefik-letsencrypt-email: $(fn-traefik-letsencrypt-email)"
     "--traefik-letsencrypt-server: $(fn-traefik-letsencrypt-server)"
@@ -73,7 +83,34 @@ cmd-traefik-report-single() {
     "--traefik-https-entry-point: $(fn-traefik-https-entry-point)"
   )
 
-  if [[ -z "$INFO_FLAG" ]]; then
+  # Get dns-provider-* env vars and add them (masked for stdout, unmasked for json)
+  local dns_provider_env_vars
+  dns_provider_env_vars="$(fn-traefik-dns-provider-env-vars)"
+  if [[ -n "$dns_provider_env_vars" ]]; then
+    while IFS= read -r line; do
+      local key value
+      key="$(echo "$line" | cut -d' ' -f1)"
+      value="$(echo "$line" | cut -d' ' -f2-)"
+      if [[ -n "$key" ]]; then
+        if [[ "$FORMAT" == "json" ]]; then
+          flag_map+=("--traefik-${key}: ${value}")
+        else
+          flag_map+=("--traefik-${key}: *******")
+        fi
+      fi
+    done <<<"$dns_provider_env_vars"
+  fi
+
+  if [[ "$FORMAT" == "json" ]]; then
+    local json_output="{}"
+    for flag in "${flag_map[@]}"; do
+      local key value
+      key="$(echo "$flag" | cut -d':' -f1 | sed 's/^--traefik-//')"
+      value="$(echo "$flag" | cut -d':' -f2- | sed 's/^ //')"
+      json_output="$(echo "$json_output" | jq -c --arg key "$key" --arg value "$value" '. + {($key): $value}')"
+    done
+    echo "$json_output"
+  elif [[ -z "$INFO_FLAG" ]]; then
     dokku_log_info2_quiet "${APP} traefik information"
     for flag in "${flag_map[@]}"; do
       key="$(echo "${flag#--}" | cut -f1 -d' ' | tr - ' ')"
diff --git a/plugins/traefik-vhosts/internal-functions b/plugins/traefik-vhosts/internal-functions
index e36e5338b..c12dd9981 100755
--- a/plugins/traefik-vhosts/internal-functions
+++ b/plugins/traefik-vhosts/internal-functions
@@ -42,11 +42,21 @@ fn-traefik-template-compose-file() {
     basic_auth="$(htpasswd -nb "$basic_auth_username" "$basic_auth_password" | sed -e s/\\$/\\$\\$/g)"
   fi
 
+  local dns_provider_env_vars=""
+  local dns_provider
+  dns_provider="$(fn-traefik-dns-provider)"
+  if [[ -n "$dns_provider" ]]; then
+    dns_provider_env_vars="$(fn-traefik-dns-provider-env-vars)"
+  fi
+
   local SIGIL_PARAMS=(TRAEFIK_API_ENABLED="$(fn-traefik-api-enabled)"
   TRAEFIK_API_VHOST="$(fn-traefik-api-vhost)"
   TRAEFIK_BASIC_AUTH="$basic_auth"
+  TRAEFIK_CHALLENGE_MODE="$(fn-traefik-challenge-mode)"
   TRAEFIK_DASHBOARD_ENABLED="$(fn-traefik-dashboard-enabled)"
   TRAEFIK_DATA_DIR="${DOKKU_LIB_ROOT}/data/traefik"
+  TRAEFIK_DNS_PROVIDER="$dns_provider"
+  TRAEFIK_DNS_PROVIDER_ENV_VARS="$dns_provider_env_vars"
   TRAEFIK_IMAGE="$(fn-traefik-image)"
   TRAEFIK_LETSENCRYPT_EMAIL="$(fn-traefik-letsencrypt-email)"
   TRAEFIK_LETSENCRYPT_SERVER="$(fn-traefik-letsencrypt-server)"
@@ -100,3 +110,16 @@ fn-traefik-http-entry-point() {
 fn-traefik-https-entry-point() {
   fn-plugin-property-get-default "traefik" "--global" "https-entry-point" "https"
 }
+
+fn-traefik-challenge-mode() {
+  fn-plugin-property-get-default "traefik" "--global" "challenge-mode" "tls"
+}
+
+fn-traefik-dns-provider() {
+  fn-plugin-property-get-default "traefik" "--global" "dns-provider" ""
+}
+
+fn-traefik-dns-provider-env-vars() {
+  declare desc="returns all dns-provider-* environment variables"
+  fn-plugin-property-get-all-by-prefix "traefik" "--global" "dns-provider-"
+}
diff --git a/plugins/traefik-vhosts/subcommands/set b/plugins/traefik-vhosts/subcommands/set
index 867386618..1e8baa5fc 100755
--- a/plugins/traefik-vhosts/subcommands/set
+++ b/plugins/traefik-vhosts/subcommands/set
@@ -9,22 +9,38 @@ cmd-traefik-set() {
   declare cmd="traefik:set"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP="$1" KEY="$2" VALUE="$3"
-  local VALID_KEYS=("api-enabled" "api-vhost" "dashboard-enabled" "basic-auth-username" "basic-auth-password" "image" "letsencrypt-email" "letsencrypt-server" "log-level" "http-entry-point" "https-entry-point")
-  local GLOBAL_KEYS=("api-enabled" "api-vhost" "dashboard-enabled" "basic-auth-username" "basic-auth-password" "image" "letsencrypt-email" "letsencrypt-server" "log-level" "http-entry-point" "https-entry-point")
+  local VALID_KEYS=("api-enabled" "api-vhost" "challenge-mode" "dashboard-enabled" "basic-auth-username" "basic-auth-password" "dns-provider" "image" "letsencrypt-email" "letsencrypt-server" "log-level" "http-entry-point" "https-entry-point")
+  local GLOBAL_KEYS=("api-enabled" "api-vhost" "challenge-mode" "dashboard-enabled" "basic-auth-username" "basic-auth-password" "dns-provider" "image" "letsencrypt-email" "letsencrypt-server" "log-level" "http-entry-point" "https-entry-point")
+  local GLOBAL_ONLY_KEYS=("challenge-mode" "dns-provider")
 
   [[ -z "$KEY" ]] && dokku_log_fail "No key specified"
 
-  if ! fn-in-array "$KEY" "${VALID_KEYS[@]}"; then
-    dokku_log_fail "Invalid key specified, valid keys include: api-enabled api-vhost dashboard-enabled basic-auth-username basic-auth-password image letsencrypt-email letsencrypt-server log-level"
+  # Allow dns-provider-* keys for setting DNS provider environment variables
+  local is_dns_provider_env_var=false
+  if [[ "$KEY" == dns-provider-* ]]; then
+    is_dns_provider_env_var=true
   fi
 
-  if ! fn-in-array "$KEY" "${GLOBAL_KEYS[@]}"; then
+  if ! fn-in-array "$KEY" "${VALID_KEYS[@]}" && [[ "$is_dns_provider_env_var" != "true" ]]; then
+    dokku_log_fail "Invalid key specified, valid keys include: api-enabled api-vhost challenge-mode dashboard-enabled basic-auth-username basic-auth-password dns-provider dns-provider-<ENV_VAR> image letsencrypt-email letsencrypt-server log-level http-entry-point https-entry-point"
+  fi
+
+  if ! fn-in-array "$KEY" "${GLOBAL_KEYS[@]}" && [[ "$is_dns_provider_env_var" != "true" ]]; then
     if [[ "$APP" == "--global" ]]; then
       dokku_log_fail "The key '$KEY' cannot be set globally"
     fi
     verify_app_name "$APP"
   fi
 
+  # dns-provider-* keys and GLOBAL_ONLY_KEYS can only be set globally
+  if [[ "$is_dns_provider_env_var" == "true" ]] && [[ "$APP" != "--global" ]]; then
+    dokku_log_fail "The key '$KEY' can only be set globally"
+  fi
+
+  if fn-in-array "$KEY" "${GLOBAL_ONLY_KEYS[@]}" && [[ "$APP" != "--global" ]]; then
+    dokku_log_fail "The key '$KEY' can only be set globally"
+  fi
+
   if [[ -n "$VALUE" ]]; then
     dokku_log_info2_quiet "Setting ${KEY} to ${VALUE}"
     fn-plugin-property-write "traefik" "$APP" "$KEY" "$VALUE"
diff --git a/plugins/traefik-vhosts/templates/compose.yml.sigil b/plugins/traefik-vhosts/templates/compose.yml.sigil
index 6a3e07f57..2b277b966 100644
--- a/plugins/traefik-vhosts/templates/compose.yml.sigil
+++ b/plugins/traefik-vhosts/templates/compose.yml.sigil
@@ -21,8 +21,25 @@ services:
       - --certificatesresolvers.leresolver.acme.caserver={{ $.TRAEFIK_LETSENCRYPT_SERVER }}
       - --certificatesresolvers.leresolver.acme.email={{ $.TRAEFIK_LETSENCRYPT_EMAIL }}
       - --certificatesresolvers.leresolver.acme.storage=/data/acme.json
+      {{ if and (eq $.TRAEFIK_CHALLENGE_MODE "dns") ($.TRAEFIK_DNS_PROVIDER) }}
+      - --certificatesresolvers.leresolver.acme.dnschallenge=true
+      - --certificatesresolvers.leresolver.acme.dnschallenge.provider={{ $.TRAEFIK_DNS_PROVIDER }}
+      {{ else }}
       - --certificatesresolvers.leresolver.acme.tlschallenge=true
       {{ end }}
+      {{ end }}
+
+    {{ if $.TRAEFIK_DNS_PROVIDER_ENV_VARS }}
+    environment:
+      {{ range $env_var := $.TRAEFIK_DNS_PROVIDER_ENV_VARS | split "\n" }}
+      {{ $env_parts := $env_var | split " " }}
+      {{ $env_key := index $env_parts 0 }}
+      {{ $env_value := index $env_parts 1 }}
+      {{ if $env_key }}
+      - {{ $env_key | replace "dns-provider-" "" | upper }}={{ $env_value }}
+      {{ end }}
+      {{ end }}
+    {{ end }}
 
     {{ if or (eq $.TRAEFIK_API_ENABLED "true") ($.TRAEFIK_BASIC_AUTH) ($.TRAEFIK_LETSENCRYPT_EMAIL) }}
     labels:
@@ -37,7 +54,7 @@ services:
       - "traefik.http.routers.api.service=api@internal"
       - "traefik.http.routers.api.entrypoints={{ if $.TRAEFIK_LETSENCRYPT_EMAIL }}https{{ else }}http{{ end }}"
       {{ end }}
-      
+
       {{ if $.TRAEFIK_BASIC_AUTH }}
       - "traefik.http.routers.api.middlewares=auth"
       - "traefik.http.middlewares.auth.basicauth.users={{ $.TRAEFIK_BASIC_AUTH }}"
diff --git a/tests/unit/traefik.bats b/tests/unit/traefik.bats
index 4c2aee542..c9a69a251 100644
--- a/tests/unit/traefik.bats
+++ b/tests/unit/traefik.bats
@@ -8,6 +8,8 @@ setup() {
   dokku traefik:set --global letsencrypt-server https://acme-staging-v02.api.letsencrypt.org/directory
   dokku traefik:set --global letsencrypt-email
   dokku traefik:set --global api-enabled
+  dokku traefik:set --global challenge-mode
+  dokku traefik:set --global dns-provider
   dokku traefik:start
   create_app
 }
@@ -368,3 +370,251 @@ teardown() {
   assert_success
   assert_output_not_exists
 }
+
+@test "(traefik) [dns-01] challenge-mode property" {
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-challenge-mode"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "tls"
+
+  run /bin/bash -c "dokku traefik:set --global challenge-mode dns"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-challenge-mode"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "dns"
+
+  run /bin/bash -c "dokku traefik:set --global challenge-mode"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-challenge-mode"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "tls"
+}
+
+@test "(traefik) [dns-01] dns-provider property" {
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-dns-provider"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider cloudflare"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-dns-provider"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "cloudflare"
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-dns-provider"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+}
+
+@test "(traefik) [dns-01] dns-provider-* environment variables" {
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_email test@example.com"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_key secret-key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "dns provider cf_api_email"
+  assert_output_contains "dns provider cf_api_key"
+  assert_output_contains "*******"
+  assert_output_not_contains "test@example.com"
+  assert_output_not_contains "secret-key"
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --traefik-dns-provider-cf_api_email"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "*******"
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_email"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_contains "dns provider cf_api_email"
+  assert_output_not_contains "dns provider cf_api_key"
+}
+
+@test "(traefik) [dns-01] dns-provider-* can only be set globally" {
+  run /bin/bash -c "dokku traefik:set $TEST_APP dns-provider-cf_api_email test@example.com"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  assert_output_contains "can only be set globally"
+}
+
+@test "(traefik) [dns-01] challenge-mode can only be set globally" {
+  run /bin/bash -c "dokku traefik:set $TEST_APP challenge-mode dns"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  assert_output_contains "can only be set globally"
+}
+
+@test "(traefik) [dns-01] dns-provider can only be set globally" {
+  run /bin/bash -c "dokku traefik:set $TEST_APP dns-provider cloudflare"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+  assert_output_contains "can only be set globally"
+}
+
+@test "(traefik) [dns-01] report json format shows unmasked dns-provider-* values" {
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_email test@example.com"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_key secret-key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --format json | jq -r '.\"dns-provider-cf_api_email\"'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "test@example.com"
+
+  run /bin/bash -c "dokku traefik:report $TEST_APP --format json | jq -r '.\"dns-provider-cf_api_key\"'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "secret-key"
+
+  # Verify stdout format still shows masked values
+  run /bin/bash -c "dokku traefik:report $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "*******"
+  assert_output_not_contains "test@example.com"
+  assert_output_not_contains "secret-key"
+
+  # Cleanup
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_email"
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_key"
+}
+
+@test "(traefik) [dns-01] show-config with tls challenge" {
+  run /bin/bash -c "dokku traefik:set --global letsencrypt-email test@example.com"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.command[] | select(. == \"--certificatesresolvers.leresolver.acme.tlschallenge=true\")'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "--certificatesresolvers.leresolver.acme.tlschallenge=true"
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.command[] | select(contains(\"dnschallenge\"))'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+}
+
+@test "(traefik) [dns-01] show-config with dns challenge" {
+  run /bin/bash -c "dokku traefik:set --global letsencrypt-email test@example.com"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global challenge-mode dns"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider cloudflare"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_email test@example.com"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_key secret-key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.command[] | select(. == \"--certificatesresolvers.leresolver.acme.dnschallenge=true\")'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "--certificatesresolvers.leresolver.acme.dnschallenge=true"
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.command[] | select(. == \"--certificatesresolvers.leresolver.acme.dnschallenge.provider=cloudflare\")'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "--certificatesresolvers.leresolver.acme.dnschallenge.provider=cloudflare"
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.environment[] | select(. == \"CF_API_EMAIL=test@example.com\")'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "CF_API_EMAIL=test@example.com"
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.environment[] | select(. == \"CF_API_KEY=secret-key\")'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "CF_API_KEY=secret-key"
+
+  run /bin/bash -c "dokku traefik:show-config | yq -r '.services.traefik.command[] | select(contains(\"tlschallenge\"))'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_not_exists
+
+  # Cleanup
+  run /bin/bash -c "dokku traefik:set --global challenge-mode"
+  run /bin/bash -c "dokku traefik:set --global dns-provider"
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_email"
+  run /bin/bash -c "dokku traefik:set --global dns-provider-cf_api_key"
+}

From 50830545e99ae2e18f8a5e4b2d7cbd3571f28793 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 7 Jan 2026 13:15:07 +0000
Subject: [PATCH 342/427] chore(deps): bump django in
 /tests/apps/dockerfile-release

Bumps [django](https://github.com/django/django) from 5.2.9 to 5.2.10.
- [Commits](https://github.com/django/django/compare/5.2.9...5.2.10)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index 323477c69..caaf92d4a 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -35,12 +35,12 @@
         },
         "django": {
             "hashes": [
-                "sha256:16b5ccfc5e8c27e6c0561af551d2ea32852d7352c67d452ae3e76b4f6b2ca495",
-                "sha256:3a4ea88a70370557ab1930b332fd2887a9f48654261cdffda663fef5976bb00a"
+                "sha256:74df100784c288c50a2b5cad59631d71214f40f72051d5af3fdf220c20bdbbbe",
+                "sha256:cf85067a64250c95d5f9067b056c5eaa80591929f7e16fbcd997746e40d6c45c"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.2.9"
+            "version": "==5.2.10"
         },
         "djangorestframework": {
             "hashes": [

From b8e8ea74fffe879c03b1980586a56024fc364300 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 01:05:40 -0500
Subject: [PATCH 343/427] feat: use certificates imported by certs plugin when
 deploying via scheduler-k3s

Closes #7257
---
 docs/deployment/schedulers/k3s.md             |  30 ++
 docs/development/plugin-triggers.md           |  24 ++
 plugins/certs/certs-get                       |  24 ++
 plugins/scheduler-k3s/.gitignore              |   1 +
 plugins/scheduler-k3s/Makefile                |   2 +-
 plugins/scheduler-k3s/functions.go            |  61 ++++
 .../scheduler-k3s/src/triggers/triggers.go    |   6 +
 plugins/scheduler-k3s/template.go             |   5 +-
 .../templates/chart/certificate.yaml          |   2 +-
 .../templates/chart/ingress-route.yaml        |   4 +
 .../templates/chart/ingress.yaml              |   4 +
 .../templates/tls-secret.yaml                 |  16 +
 plugins/scheduler-k3s/tls.go                  | 332 ++++++++++++++++++
 plugins/scheduler-k3s/triggers.go             | 143 ++++++--
 tests/unit/scheduler-k3s-certs-deploy.bats    | 143 ++++++++
 tests/unit/scheduler-k3s-certs.bats           | 140 ++++++++
 16 files changed, 899 insertions(+), 38 deletions(-)
 create mode 100755 plugins/certs/certs-get
 create mode 100644 plugins/scheduler-k3s/templates/tls-secret-chart/templates/tls-secret.yaml
 create mode 100644 plugins/scheduler-k3s/tls.go
 create mode 100644 tests/unit/scheduler-k3s-certs-deploy.bats
 create mode 100755 tests/unit/scheduler-k3s-certs.bats

diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index 2c98958ec..69de38b3d 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -307,6 +307,36 @@ The server can also be disabled globally, and then conditionally enabled on a pe
 dokku scheduler-k3s:set --global letsencrypt-server false
 ```
 
+#### Using imported SSL certificates
+
+SSL certificates imported via the `certs` plugin can be used with the k3s scheduler. When a certificate is imported, it is automatically synced to Kubernetes as a TLS secret and will be used for the app's ingress configuration.
+
+To import a certificate:
+
+```shell
+dokku certs:add node-js-app server.crt server.key
+```
+
+When a certificate is imported:
+
+- A Kubernetes TLS secret named `tls-<app-name>` is created in the app's namespace
+- The ingress configuration is updated to use the imported certificate
+- Automatic Let's Encrypt certificate generation is disabled for the app
+
+Imported certificates take precedence over Let's Encrypt certificates. If you have both an imported certificate and Let's Encrypt configured, the imported certificate will be used.
+
+To remove an imported certificate:
+
+```shell
+dokku certs:remove node-js-app
+```
+
+When a certificate is removed:
+
+- The TLS secret is deleted from Kubernetes
+- The app is automatically redeployed to update the ingress configuration
+- If Let's Encrypt is configured, automatic certificate generation will resume
+
 ### Customizing Annotations and Labels
 
 > [!NOTE]
diff --git a/docs/development/plugin-triggers.md b/docs/development/plugin-triggers.md
index 77788ad3b..35e809137 100644
--- a/docs/development/plugin-triggers.md
+++ b/docs/development/plugin-triggers.md
@@ -387,6 +387,30 @@ set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
 # TODO
 ```
 
+### `certs-get`
+
+- Description: Returns the certificate or key content for an app
+- Invoked by: `scheduler-k3s`
+- Arguments: `$APP $KEY_TYPE`
+- Example:
+
+```shell
+#!/usr/bin/env bash
+# Returns the certificate or key content for an app
+# KEY_TYPE should be "crt" or "key"
+
+set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
+
+APP="$1"; KEY_TYPE="$2"
+APP_SSL_PATH="$DOKKU_ROOT/$APP/tls"
+
+if [[ "$KEY_TYPE" == "crt" ]]; then
+  cat "$APP_SSL_PATH/server.crt"
+elif [[ "$KEY_TYPE" == "key" ]]; then
+  cat "$APP_SSL_PATH/server.key"
+fi
+```
+
 ### `check-deploy`
 
 - Description: Allows you to run checks on a deploy before Dokku allows the container to handle requests.
diff --git a/plugins/certs/certs-get b/plugins/certs/certs-get
new file mode 100755
index 000000000..b4192ae63
--- /dev/null
+++ b/plugins/certs/certs-get
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+source "$PLUGIN_AVAILABLE_PATH/certs/functions"
+set -eo pipefail
+[[ $DOKKU_TRACE ]] && set -x
+
+trigger-certs-certs-get() {
+  declare desc="returns certificate or key content"
+  declare trigger="certs-get"
+  declare APP="$1" KEY_TYPE="$2"
+
+  local APP_SSL_PATH="$DOKKU_ROOT/$APP/tls"
+
+  if [[ "$KEY_TYPE" != "key" ]] && [[ "$KEY_TYPE" != "crt" ]]; then
+    return 1
+  fi
+
+  if ! is_ssl_enabled "$APP"; then
+    return 1
+  fi
+
+  cat "$APP_SSL_PATH/server.$KEY_TYPE"
+}
+
+trigger-certs-certs-get "$@"
diff --git a/plugins/scheduler-k3s/.gitignore b/plugins/scheduler-k3s/.gitignore
index c6bcef78b..120774657 100644
--- a/plugins/scheduler-k3s/.gitignore
+++ b/plugins/scheduler-k3s/.gitignore
@@ -6,3 +6,4 @@
 /install
 /post-*
 /report
+/core-*
diff --git a/plugins/scheduler-k3s/Makefile b/plugins/scheduler-k3s/Makefile
index 3c46a33ef..fce3bb816 100644
--- a/plugins/scheduler-k3s/Makefile
+++ b/plugins/scheduler-k3s/Makefile
@@ -1,5 +1,5 @@
 SUBCOMMANDS = subcommands/annotations:set subcommands/autoscaling-auth:set subcommands/autoscaling-auth:report subcommands/cluster:add subcommands/cluster:list subcommands/cluster:remove subcommands/ensure-charts subcommands/initialize subcommands/labels:set subcommands/profiles:add subcommands/profiles:list subcommands/profiles:remove subcommands/report subcommands/set subcommands/show-kubeconfig subcommands/uninstall
-TRIGGERS = triggers/core-post-deploy triggers/core-post-extract triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-create triggers/post-delete triggers/report triggers/scheduler-app-status triggers/scheduler-deploy triggers/scheduler-enter triggers/scheduler-is-deployed triggers/scheduler-logs triggers/scheduler-proxy-config triggers/scheduler-proxy-logs triggers/scheduler-post-delete triggers/scheduler-run triggers/scheduler-run-list triggers/scheduler-stop triggers/scheduler-cron-write
+TRIGGERS = triggers/core-post-deploy triggers/core-post-extract triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-certs-update triggers/post-certs-remove triggers/post-create triggers/post-delete triggers/report triggers/scheduler-app-status triggers/scheduler-deploy triggers/scheduler-enter triggers/scheduler-is-deployed triggers/scheduler-logs triggers/scheduler-proxy-config triggers/scheduler-proxy-logs triggers/scheduler-post-delete triggers/scheduler-run triggers/scheduler-run-list triggers/scheduler-stop triggers/scheduler-cron-write
 BUILD = commands subcommands triggers
 PLUGIN_NAME = scheduler-k3s
 
diff --git a/plugins/scheduler-k3s/functions.go b/plugins/scheduler-k3s/functions.go
index fe718153b..3cbbc3251 100644
--- a/plugins/scheduler-k3s/functions.go
+++ b/plugins/scheduler-k3s/functions.go
@@ -1262,6 +1262,67 @@ func getGlobalGlobalToken() string {
 	return common.PropertyGet("scheduler-k3s", "--global", "token")
 }
 
+func getDeployedAppImageTag(appName string) (string, error) {
+	appValues, err := helmValuesForApp(appName)
+	if err != nil {
+		return "", err
+	}
+
+	if appValues.Global.Image.Name == "" {
+		return "", fmt.Errorf("image name not found in helm release")
+	}
+
+	return appValues.Global.Image.Name, nil
+}
+
+func helmValuesForApp(appName string) (AppValues, error) {
+	namespace := getComputedNamespace(appName)
+	helmAgent, err := NewHelmAgent(namespace, DevNullPrinter)
+	if err != nil {
+		return AppValues{}, fmt.Errorf("error creating helm agent: %w", err)
+	}
+
+	exists, err := helmAgent.ChartExists(appName)
+	if err != nil {
+		return AppValues{}, fmt.Errorf("error checking if chart exists: %w", err)
+	}
+	if !exists {
+		return AppValues{}, fmt.Errorf("app %s is not deployed", appName)
+	}
+
+	values, err := helmAgent.GetValues(appName)
+	if err != nil {
+		return AppValues{}, fmt.Errorf("error getting helm values: %w", err)
+	}
+
+	b, err := yaml.Marshal(values)
+	if err != nil {
+		return AppValues{}, fmt.Errorf("error marshaling helm values: %w", err)
+	}
+
+	var appValues AppValues
+	if err := yaml.Unmarshal(b, &appValues); err != nil {
+		return AppValues{}, fmt.Errorf("error unmarshaling helm values: %w", err)
+	}
+
+	return appValues, nil
+}
+
+func isAppDeployed(appName string) bool {
+	namespace := getComputedNamespace(appName)
+	helmAgent, err := NewHelmAgent(namespace, DevNullPrinter)
+	if err != nil {
+		return false
+	}
+
+	exists, err := helmAgent.ChartExists(appName)
+	if err != nil {
+		return false
+	}
+
+	return exists
+}
+
 func getProcessHealtchecks(healthchecks []appjson.Healthcheck, primaryPort int32) ProcessHealthchecks {
 	if len(healthchecks) == 0 {
 		return ProcessHealthchecks{}
diff --git a/plugins/scheduler-k3s/src/triggers/triggers.go b/plugins/scheduler-k3s/src/triggers/triggers.go
index 15caf5146..d78606e72 100644
--- a/plugins/scheduler-k3s/src/triggers/triggers.go
+++ b/plugins/scheduler-k3s/src/triggers/triggers.go
@@ -42,6 +42,12 @@ func main() {
 	case "post-create":
 		appName := flag.Arg(0)
 		err = scheduler_k3s.TriggerPostCreate(appName)
+	case "post-certs-update":
+		appName := flag.Arg(0)
+		err = scheduler_k3s.TriggerPostCertsUpdate(appName)
+	case "post-certs-remove":
+		appName := flag.Arg(0)
+		err = scheduler_k3s.TriggerPostCertsRemove(appName)
 	case "post-delete":
 		appName := flag.Arg(0)
 		err = scheduler_k3s.TriggerPostDelete(appName)
diff --git a/plugins/scheduler-k3s/template.go b/plugins/scheduler-k3s/template.go
index 4f57700ba..b850df321 100644
--- a/plugins/scheduler-k3s/template.go
+++ b/plugins/scheduler-k3s/template.go
@@ -336,8 +336,9 @@ func (a NameSorter) Swap(i, j int)      { a[i], a[j] = a[j], a[i] }
 func (a NameSorter) Less(i, j int) bool { return a[i].Name < a[j].Name }
 
 type ProcessTls struct {
-	Enabled    bool   `yaml:"enabled"`
-	IssuerName string `yaml:"issuer_name"`
+	Enabled         bool   `yaml:"enabled"`
+	IssuerName      string `yaml:"issuer_name"`
+	UseImportedCert bool   `yaml:"use_imported_cert"`
 }
 
 type ClusterIssuer struct {
diff --git a/plugins/scheduler-k3s/templates/chart/certificate.yaml b/plugins/scheduler-k3s/templates/chart/certificate.yaml
index 077470ce8..0f3fe05a9 100644
--- a/plugins/scheduler-k3s/templates/chart/certificate.yaml
+++ b/plugins/scheduler-k3s/templates/chart/certificate.yaml
@@ -4,7 +4,7 @@
 {{- continue }}
 {{- end }}
 
-{{- if and $config.web.tls.enabled $config.web.domains }}
+{{- if and $config.web.tls.enabled (not $config.web.tls.use_imported_cert) $config.web.domains }}
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
diff --git a/plugins/scheduler-k3s/templates/chart/ingress-route.yaml b/plugins/scheduler-k3s/templates/chart/ingress-route.yaml
index fb137204e..24dd8e2ef 100644
--- a/plugins/scheduler-k3s/templates/chart/ingress-route.yaml
+++ b/plugins/scheduler-k3s/templates/chart/ingress-route.yaml
@@ -53,7 +53,11 @@ spec:
     {{- end }}
   {{- if $config.web.tls.enabled }}
   tls:
+    {{- if $config.web.tls.use_imported_cert }}
+    secretName: tls-{{ $.Values.global.app_name }}
+    {{- else }}
     secretName: tls-{{ $.Values.global.app_name }}-{{ $processName }}
+    {{- end }}
   {{- end }}
 {{- end }}
 {{- end }}
diff --git a/plugins/scheduler-k3s/templates/chart/ingress.yaml b/plugins/scheduler-k3s/templates/chart/ingress.yaml
index 1b5cd1081..3644fd2b8 100644
--- a/plugins/scheduler-k3s/templates/chart/ingress.yaml
+++ b/plugins/scheduler-k3s/templates/chart/ingress.yaml
@@ -38,7 +38,11 @@ spec:
   tls:
     - hosts:
       - {{ $domain.name | quote }}
+      {{- if $config.web.tls.use_imported_cert }}
+      secretName: tls-{{ $.Values.global.app_name }}
+      {{- else }}
       secretName: tls-{{ $.Values.global.app_name }}-{{ $processName }}
+      {{- end }}
   {{- end }}
   rules:
     - host: {{ $domain.name | quote }}
diff --git a/plugins/scheduler-k3s/templates/tls-secret-chart/templates/tls-secret.yaml b/plugins/scheduler-k3s/templates/tls-secret-chart/templates/tls-secret.yaml
new file mode 100644
index 000000000..ee25cac09
--- /dev/null
+++ b/plugins/scheduler-k3s/templates/tls-secret-chart/templates/tls-secret.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/tls
+metadata:
+  name: tls-{{ .Values.global.app_name }}
+  namespace: {{ .Values.global.namespace }}
+  labels:
+    app.kubernetes.io/name: tls-{{ .Values.global.app_name }}
+    app.kubernetes.io/part-of: {{ .Values.global.app_name }}
+    dokku.com/cert-source: "imported"
+    dokku.com/cert-checksum: {{ .Values.global.cert_checksum | quote }}
+  annotations:
+    dokku.com/managed: "true"
+data:
+  tls.crt: {{ .Values.global.tls_crt }}
+  tls.key: {{ .Values.global.tls_key }}
diff --git a/plugins/scheduler-k3s/tls.go b/plugins/scheduler-k3s/tls.go
new file mode 100644
index 000000000..4c8c9f0c4
--- /dev/null
+++ b/plugins/scheduler-k3s/tls.go
@@ -0,0 +1,332 @@
+package scheduler_k3s
+
+import (
+	"context"
+	"crypto/sha256"
+	"encoding/base64"
+	"encoding/hex"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/dokku/dokku/plugins/common"
+)
+
+// TLSSecretValues contains the values for a TLS secret helm chart
+type TLSSecretValues struct {
+	Global TLSSecretGlobalValues `yaml:"global"`
+}
+
+// TLSSecretGlobalValues contains the global values for TLS secret
+type TLSSecretGlobalValues struct {
+	AppName      string `yaml:"app_name"`
+	Namespace    string `yaml:"namespace"`
+	CertChecksum string `yaml:"cert_checksum"`
+	TLSCrt       string `yaml:"tls_crt"`
+	TLSKey       string `yaml:"tls_key"`
+}
+
+// GetCertContent retrieves certificate content via the certs-get trigger
+func GetCertContent(appName string, keyType string) (string, error) {
+	result, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
+		Trigger: "certs-get",
+		Args:    []string{appName, keyType},
+	})
+	if err != nil {
+		return "", fmt.Errorf("failed to get cert content: %w", err)
+	}
+	if result.ExitCode != 0 {
+		return "", fmt.Errorf("certs-get trigger returned non-zero exit code")
+	}
+	return result.StdoutContents(), nil
+}
+
+// CertsExist checks if certificates exist for an app
+func CertsExist(appName string) bool {
+	result, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
+		Trigger: "certs-exists",
+		Args:    []string{appName},
+	})
+	if err != nil {
+		return false
+	}
+	return strings.TrimSpace(result.StdoutContents()) == "true"
+}
+
+// ComputeCertChecksum computes sha224 of combined cert+key content
+// SHA224 produces a 56-character hex string which fits within Kubernetes label limit of 63 chars
+func ComputeCertChecksum(certContent, keyContent string) string {
+	combined := certContent + keyContent
+	hash := sha256.Sum224([]byte(combined))
+	return hex.EncodeToString(hash[:])
+}
+
+// GetTLSSecretReleaseName returns the helm release name for TLS secret
+func GetTLSSecretReleaseName(appName string) string {
+	return fmt.Sprintf("tls-%s", appName)
+}
+
+// CreateOrUpdateTLSSecret creates or updates a TLS secret helm chart for an app
+func CreateOrUpdateTLSSecret(ctx context.Context, appName string) error {
+	if err := isKubernetesAvailable(); err != nil {
+		common.LogDebug("kubernetes not available, skipping TLS secret creation")
+		return nil
+	}
+
+	scheduler := common.PropertyGetDefault("scheduler", appName, "selected", "")
+	globalScheduler := common.PropertyGetDefault("scheduler", "--global", "selected", "docker-local")
+	if scheduler == "" {
+		scheduler = globalScheduler
+	}
+	if scheduler != "k3s" {
+		common.LogDebug("app does not use k3s scheduler, skipping TLS secret creation")
+		return nil
+	}
+
+	certContent, err := GetCertContent(appName, "crt")
+	if err != nil {
+		return fmt.Errorf("failed to get certificate: %w", err)
+	}
+
+	keyContent, err := GetCertContent(appName, "key")
+	if err != nil {
+		return fmt.Errorf("failed to get key: %w", err)
+	}
+
+	checksum := ComputeCertChecksum(certContent, keyContent)
+
+	chartDir, err := os.MkdirTemp("", "dokku-tls-chart-")
+	if err != nil {
+		return fmt.Errorf("error creating chart directory: %w", err)
+	}
+	defer os.RemoveAll(chartDir)
+
+	if err := os.MkdirAll(filepath.Join(chartDir, "templates"), os.FileMode(0755)); err != nil {
+		return fmt.Errorf("error creating chart templates directory: %w", err)
+	}
+
+	namespace := getComputedNamespace(appName)
+	releaseName := GetTLSSecretReleaseName(appName)
+
+	chart := &Chart{
+		ApiVersion: "v2",
+		AppVersion: "1.0.0",
+		Name:       releaseName,
+		Icon:       "https://dokku.com/assets/dokku-logo.svg",
+		Version:    "0.0.1",
+	}
+
+	err = writeYaml(WriteYamlInput{
+		Object: chart,
+		Path:   filepath.Join(chartDir, "Chart.yaml"),
+	})
+	if err != nil {
+		return fmt.Errorf("error writing chart: %w", err)
+	}
+
+	b, err := templates.ReadFile("templates/tls-secret-chart/templates/tls-secret.yaml")
+	if err != nil {
+		return fmt.Errorf("error reading tls-secret template: %w", err)
+	}
+
+	filename := filepath.Join(chartDir, "templates", "tls-secret.yaml")
+	err = os.WriteFile(filename, b, os.FileMode(0644))
+	if err != nil {
+		return fmt.Errorf("error writing tls-secret template: %w", err)
+	}
+
+	if os.Getenv("DOKKU_TRACE") == "1" {
+		common.CatFile(filename)
+	}
+
+	values := &TLSSecretValues{
+		Global: TLSSecretGlobalValues{
+			AppName:      appName,
+			Namespace:    namespace,
+			CertChecksum: checksum,
+			TLSCrt:       base64.StdEncoding.EncodeToString([]byte(certContent)),
+			TLSKey:       base64.StdEncoding.EncodeToString([]byte(keyContent)),
+		},
+	}
+
+	err = writeYaml(WriteYamlInput{
+		Object: values,
+		Path:   filepath.Join(chartDir, "values.yaml"),
+	})
+	if err != nil {
+		return fmt.Errorf("error writing values: %w", err)
+	}
+
+	if err := createKubernetesNamespace(ctx, namespace); err != nil {
+		return fmt.Errorf("error creating namespace: %w", err)
+	}
+
+	helmAgent, err := NewHelmAgent(namespace, DeployLogPrinter)
+	if err != nil {
+		return fmt.Errorf("error creating helm agent: %w", err)
+	}
+
+	chartPath, err := filepath.Abs(chartDir)
+	if err != nil {
+		return fmt.Errorf("error getting chart path: %w", err)
+	}
+
+	common.LogInfo1(fmt.Sprintf("Installing TLS certificate for %s", appName))
+	err = helmAgent.InstallOrUpgradeChart(ctx, ChartInput{
+		ChartPath:   chartPath,
+		Namespace:   namespace,
+		ReleaseName: releaseName,
+		Wait:        true,
+	})
+	if err != nil {
+		return fmt.Errorf("error installing TLS secret chart: %w", err)
+	}
+
+	if err := common.PropertyWrite("scheduler-k3s", appName, "tls-cert-imported", "true"); err != nil {
+		return fmt.Errorf("error setting tls-cert-imported property: %w", err)
+	}
+
+	return nil
+}
+
+// DeleteTLSSecret deletes the TLS secret helm chart for an app
+func DeleteTLSSecret(ctx context.Context, appName string) (bool, error) {
+	if err := isKubernetesAvailable(); err != nil {
+		common.LogDebug("kubernetes not available, skipping TLS secret deletion")
+		return false, nil
+	}
+
+	namespace := getComputedNamespace(appName)
+	releaseName := GetTLSSecretReleaseName(appName)
+
+	helmAgent, err := NewHelmAgent(namespace, DeployLogPrinter)
+	if err != nil {
+		return false, fmt.Errorf("error creating helm agent: %w", err)
+	}
+
+	exists, err := helmAgent.ChartExists(releaseName)
+	if err != nil {
+		return false, fmt.Errorf("error checking if TLS secret chart exists: %w", err)
+	}
+
+	if !exists {
+		if err := common.PropertyDelete("scheduler-k3s", appName, "tls-cert-imported"); err != nil {
+			common.LogDebug(fmt.Sprintf("error clearing tls-cert-imported property: %v", err))
+		}
+		return false, nil
+	}
+
+	common.LogInfo1(fmt.Sprintf("Removing TLS certificate for %s", appName))
+	err = helmAgent.UninstallChart(releaseName)
+	if err != nil {
+		return false, fmt.Errorf("error uninstalling TLS secret chart: %w", err)
+	}
+
+	if err := common.PropertyDelete("scheduler-k3s", appName, "tls-cert-imported"); err != nil {
+		common.LogDebug(fmt.Sprintf("error clearing tls-cert-imported property: %v", err))
+	}
+
+	return true, nil
+}
+
+// HasImportedTLSCert checks if an app has an imported TLS certificate
+func HasImportedTLSCert(appName string) bool {
+	value := common.PropertyGetDefault("scheduler-k3s", appName, "tls-cert-imported", "")
+	return value == "true"
+}
+
+// TLSSecretExists checks if the TLS secret helm release exists in k8s
+func TLSSecretExists(ctx context.Context, appName string) (bool, error) {
+	namespace := getComputedNamespace(appName)
+	releaseName := GetTLSSecretReleaseName(appName)
+
+	helmAgent, err := NewHelmAgent(namespace, DevNullPrinter)
+	if err != nil {
+		return false, fmt.Errorf("error creating helm agent: %w", err)
+	}
+
+	return helmAgent.ChartExists(releaseName)
+}
+
+// TLSSecretNeedsUpdate checks if the TLS secret needs updating by comparing checksums
+func TLSSecretNeedsUpdate(ctx context.Context, appName string) (bool, error) {
+	clientset, err := NewKubernetesClient()
+	if err != nil {
+		return false, fmt.Errorf("error creating kubernetes client: %w", err)
+	}
+
+	namespace := getComputedNamespace(appName)
+	secretName := fmt.Sprintf("tls-%s", appName)
+
+	secret, err := clientset.GetSecret(ctx, GetSecretInput{
+		Name:      secretName,
+		Namespace: namespace,
+	})
+	if err != nil {
+		return true, nil
+	}
+
+	existingChecksum, ok := secret.Labels["dokku.com/cert-checksum"]
+	if !ok {
+		return true, nil
+	}
+
+	certContent, err := GetCertContent(appName, "crt")
+	if err != nil {
+		return false, err
+	}
+
+	keyContent, err := GetCertContent(appName, "key")
+	if err != nil {
+		return false, err
+	}
+
+	currentChecksum := ComputeCertChecksum(certContent, keyContent)
+	return existingChecksum != currentChecksum, nil
+}
+
+// syncExistingCertificates syncs certificates for all apps using k3s scheduler
+func syncExistingCertificates() error {
+	if err := isKubernetesAvailable(); err != nil {
+		common.LogDebug("kubernetes not available, skipping certificate sync")
+		return nil
+	}
+
+	ctx := context.Background()
+
+	apps, err := common.DokkuApps()
+	if err != nil {
+		return fmt.Errorf("failed to list apps: %w", err)
+	}
+
+	for _, appName := range apps {
+		scheduler := common.PropertyGetDefault("scheduler", appName, "selected", "")
+		globalScheduler := common.PropertyGetDefault("scheduler", "--global", "selected", "docker-local")
+		if scheduler == "" {
+			scheduler = globalScheduler
+		}
+		if scheduler != "k3s" {
+			continue
+		}
+
+		if !CertsExist(appName) {
+			continue
+		}
+
+		needsUpdate, err := TLSSecretNeedsUpdate(ctx, appName)
+		if err != nil {
+			common.LogDebug(fmt.Sprintf("Error checking TLS secret for %s: %v", appName, err))
+			continue
+		}
+
+		if needsUpdate {
+			common.LogInfo1(fmt.Sprintf("Syncing TLS certificate for %s", appName))
+			if err := CreateOrUpdateTLSSecret(ctx, appName); err != nil {
+				common.LogWarn(fmt.Sprintf("Failed to sync TLS certificate for %s: %v", appName, err))
+			}
+		}
+	}
+
+	return nil
+}
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index 4ca9e52dc..da6d531a8 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -42,8 +42,6 @@ func TriggerCorePostDeploy(appName string) error {
 			{Path: "kustomization", IsDirectory: true},
 		},
 	})
-
-	return nil
 }
 
 // TriggerCorePostExtract moves a configured kustomize root path to be in the app root dir
@@ -76,9 +74,81 @@ func TriggerInstall() error {
 		return err
 	}
 
+	if err := syncExistingCertificates(); err != nil {
+		common.LogWarn(fmt.Sprintf("Warning: failed to sync existing certificates: %v", err))
+	}
+
 	return nil
 }
 
+// TriggerPostCertsUpdate handles post-certs-update trigger
+func TriggerPostCertsUpdate(appName string) error {
+	scheduler := common.PropertyGetDefault("scheduler", appName, "selected", "")
+	globalScheduler := common.PropertyGetDefault("scheduler", "--global", "selected", "docker-local")
+	if scheduler == "" {
+		scheduler = globalScheduler
+	}
+	if scheduler != "k3s" {
+		return nil
+	}
+
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+
+	common.LogInfo1(fmt.Sprintf("Syncing TLS certificate for %s to kubernetes", appName))
+	if err := CreateOrUpdateTLSSecret(ctx, appName); err != nil {
+		return err
+	}
+
+	if !isAppDeployed(appName) {
+		return nil
+	}
+
+	imageTag, err := getDeployedAppImageTag(appName)
+	if err != nil {
+		return nil
+	}
+
+	common.LogInfo1(fmt.Sprintf("Triggering redeploy for %s to update ingress configuration", appName))
+	return TriggerSchedulerDeploy("k3s", appName, imageTag)
+}
+
+// TriggerPostCertsRemove handles post-certs-remove trigger
+func TriggerPostCertsRemove(appName string) error {
+	scheduler := common.PropertyGetDefault("scheduler", appName, "selected", "")
+	globalScheduler := common.PropertyGetDefault("scheduler", "--global", "selected", "docker-local")
+	if scheduler == "" {
+		scheduler = globalScheduler
+	}
+	if scheduler != "k3s" {
+		return nil
+	}
+
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+
+	deleted, err := DeleteTLSSecret(ctx, appName)
+	if err != nil {
+		return err
+	}
+
+	if !deleted {
+		return nil
+	}
+
+	if !isAppDeployed(appName) {
+		return nil
+	}
+
+	imageTag, err := getDeployedAppImageTag(appName)
+	if err != nil {
+		return nil
+	}
+
+	common.LogInfo1(fmt.Sprintf("Triggering redeploy for %s to update ingress configuration", appName))
+	return TriggerSchedulerDeploy("k3s", appName, imageTag)
+}
+
 // TriggerPostAppCloneSetup creates new scheduler-k3s files
 func TriggerPostAppCloneSetup(oldAppName string, newAppName string) error {
 	err := common.PropertyClone("scheduler-k3s", oldAppName, newAppName)
@@ -284,24 +354,41 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 		return fmt.Errorf("Error loading environment for deployment: %w", err)
 	}
 
-	server := getComputedLetsencryptServer(appName)
-	letsencryptEmailStag := getGlobalLetsencryptEmailStag()
-	letsencryptEmailProd := getGlobalLetsencryptEmailProd()
-	tlsEnabled := false
+	// Check for imported TLS certificate first
+	importedCertExists := false
+	if HasImportedTLSCert(appName) {
+		exists, err := TLSSecretExists(ctx, appName)
+		if err == nil && exists {
+			importedCertExists = true
+		}
+	}
 
+	// Determine TLS configuration
+	tlsEnabled := false
 	issuerName := ""
-	switch server {
-	case "prod", "production":
-		issuerName = "letsencrypt-prod"
-		tlsEnabled = letsencryptEmailProd != ""
-	case "stag", "staging":
-		issuerName = "letsencrypt-stag"
-		tlsEnabled = letsencryptEmailStag != ""
-	case "false":
-		issuerName = ""
-		tlsEnabled = false
-	default:
-		return fmt.Errorf("Invalid letsencrypt server config: %s", server)
+	useImportedCert := false
+
+	if importedCertExists {
+		tlsEnabled = true
+		useImportedCert = true
+	} else {
+		server := getComputedLetsencryptServer(appName)
+		letsencryptEmailStag := getGlobalLetsencryptEmailStag()
+		letsencryptEmailProd := getGlobalLetsencryptEmailProd()
+
+		switch server {
+		case "prod", "production":
+			issuerName = "letsencrypt-prod"
+			tlsEnabled = letsencryptEmailProd != ""
+		case "stag", "staging":
+			issuerName = "letsencrypt-stag"
+			tlsEnabled = letsencryptEmailStag != ""
+		case "false":
+			issuerName = ""
+			tlsEnabled = false
+		default:
+			return fmt.Errorf("Invalid letsencrypt server config: %s", server)
+		}
 	}
 
 	chartDir, err := os.MkdirTemp("", "dokku-chart-")
@@ -577,8 +664,9 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 				Domains:  domainValues,
 				PortMaps: []ProcessPortMap{},
 				TLS: ProcessTls{
-					Enabled:    tlsEnabled,
-					IssuerName: issuerName,
+					Enabled:         tlsEnabled,
+					IssuerName:      issuerName,
+					UseImportedCert: useImportedCert,
 				},
 			}
 
@@ -883,20 +971,7 @@ func TriggerSchedulerIsDeployed(scheduler string, appName string) error {
 		return nil
 	}
 
-	// check if there are any helm revisions for the specified appName
-	helmAgent, err := NewHelmAgent(getComputedNamespace(appName), DeployLogPrinter)
-	if err != nil {
-		return fmt.Errorf("Error creating helm agent: %w", err)
-	}
-
-	revisions, err := helmAgent.ListRevisions(ListRevisionsInput{
-		ReleaseName: appName,
-	})
-	if err != nil {
-		return fmt.Errorf("Error listing helm revisions: %w", err)
-	}
-
-	if len(revisions) > 0 {
+	if isAppDeployed(appName) {
 		return nil
 	}
 
diff --git a/tests/unit/scheduler-k3s-certs-deploy.bats b/tests/unit/scheduler-k3s-certs-deploy.bats
new file mode 100644
index 000000000..e87db7b6d
--- /dev/null
+++ b/tests/unit/scheduler-k3s-certs-deploy.bats
@@ -0,0 +1,143 @@
+#!/usr/bin/env bats
+
+load test_helper
+
+TEST_APP="rdmtestapp"
+
+setup_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  mkdir -p $TLS
+  tar xf $BATS_TEST_DIRNAME/server_ssl.tar -C $TLS
+  sudo chown -R dokku:dokku $TLS
+}
+
+teardown_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  rm -R $TLS
+}
+
+setup() {
+  uninstall_k3s || true
+  global_setup
+  dokku nginx:stop
+  export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
+  setup_local_tls
+}
+
+teardown() {
+  global_teardown
+  dokku nginx:start
+  uninstall_k3s || true
+  teardown_local_tls
+}
+
+@test "(scheduler-k3s:certs) deploy uses imported certificate when present" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku domains:set $TEST_APP $TEST_APP.dokku.me"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python "dokku@$DOKKU_DOMAIN:$TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "sleep 30"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get ingress ${TEST_APP}-web-${TEST_APP}-dokku-me -n default -o jsonpath='{.spec.tls[0].secretName}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "tls-$TEST_APP"
+}
+
+@test "(scheduler-k3s:certs) deploy falls back to letsencrypt when no imported cert" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku scheduler-k3s:set --global letsencrypt-email-stag test@dokku.me"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku scheduler-k3s:set --global letsencrypt-server staging"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku domains:set $TEST_APP $TEST_APP.dokku.me"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run deploy_app python "dokku@$DOKKU_DOMAIN:$TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "sleep 30"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get ingress ${TEST_APP}-web-${TEST_APP}-dokku-me -n default -o jsonpath='{.spec.tls[0].secretName}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "tls-${TEST_APP}-web"
+}
+
+@test "(scheduler-k3s:certs) no TLS secret created for non-k3s scheduler app" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku scheduler:set $TEST_APP selected docker-local"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default 2>&1"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+}
diff --git a/tests/unit/scheduler-k3s-certs.bats b/tests/unit/scheduler-k3s-certs.bats
new file mode 100755
index 000000000..28115e167
--- /dev/null
+++ b/tests/unit/scheduler-k3s-certs.bats
@@ -0,0 +1,140 @@
+#!/usr/bin/env bats
+
+load test_helper
+
+TEST_APP="rdmtestapp"
+
+setup_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  mkdir -p $TLS
+  tar xf $BATS_TEST_DIRNAME/server_ssl.tar -C $TLS
+  sudo chown -R dokku:dokku $TLS
+}
+
+teardown_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  rm -R $TLS
+}
+
+setup() {
+  uninstall_k3s || true
+  global_setup
+  dokku nginx:stop
+  export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
+  setup_local_tls
+}
+
+teardown() {
+  global_teardown
+  dokku nginx:start
+  uninstall_k3s || true
+  teardown_local_tls
+}
+
+@test "(scheduler-k3s:certs) certificate import creates k8s TLS secret" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku scheduler:set $TEST_APP selected k3s"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Installing TLS certificate for $TEST_APP"
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default -o jsonpath='{.metadata.labels.dokku\\.com/cert-source}'"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "imported"
+}
+
+@test "(scheduler-k3s:certs) certificate update updates k8s TLS secret" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku scheduler:set $TEST_APP selected k3s"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  CHECKSUM1=$(kubectl get secret tls-$TEST_APP -n default -o jsonpath='{.metadata.labels.dokku\.com/cert-checksum}')
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  CHECKSUM2=$(kubectl get secret tls-$TEST_APP -n default -o jsonpath='{.metadata.labels.dokku\.com/cert-checksum}')
+
+  [ "$CHECKSUM1" = "$CHECKSUM2" ]
+}
+
+@test "(scheduler-k3s:certs) certificate removal deletes k8s TLS secret" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku scheduler:set $TEST_APP selected k3s"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:remove $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Removing TLS certificate for $TEST_APP"
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+}

From c7ef61311879c75b6a02ed874c3308d0d8fccbd2 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 01:37:34 -0500
Subject: [PATCH 344/427] fix: set correct version for builder-railpack plugin

---
 plugins/builder-railpack/plugin.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/builder-railpack/plugin.toml b/plugins/builder-railpack/plugin.toml
index 6fa72020b..fdeb54bb7 100644
--- a/plugins/builder-railpack/plugin.toml
+++ b/plugins/builder-railpack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-railpack plugin"
-version = "0.36.7"
+version = "0.37.4"
 [plugin.config]

From 8af070ac00241b684839a09bd33e75a5b698b5d9 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 01:51:28 -0500
Subject: [PATCH 345/427] feat: rewrite the storage plugin in golang

Refs #6814
---
 plugins/docker-options/dockeroptions.go       |  23 ++
 plugins/storage/.gitignore                    |   8 +
 plugins/storage/Makefile                      |   7 +
 plugins/storage/bin/chown-storage-dir         |  12 +-
 plugins/storage/commands                      |  16 --
 plugins/storage/functions                     |  31 ---
 plugins/storage/go.mod                        |  37 +++
 plugins/storage/go.sum                        | 108 ++++++++
 plugins/storage/help-functions                |  36 ---
 plugins/storage/install                       |  24 --
 plugins/storage/internal-functions            | 168 ------------
 plugins/storage/report                        |   6 -
 plugins/storage/src/commands/commands.go      |  60 +++++
 .../storage/src/subcommands/subcommands.go    |  72 ++++++
 plugins/storage/src/triggers/triggers.go      |  34 +++
 plugins/storage/storage-list                  |  24 --
 plugins/storage/storage.go                    | 130 ++++++++++
 plugins/storage/storage_test.go               |  90 +++++++
 plugins/storage/subcommands.go                | 241 ++++++++++++++++++
 plugins/storage/subcommands/default           |   6 -
 plugins/storage/subcommands/ensure-directory  |   6 -
 plugins/storage/subcommands/list              |   6 -
 plugins/storage/subcommands/mount             |  21 --
 plugins/storage/subcommands/report            |   6 -
 plugins/storage/subcommands/unmount           |  21 --
 plugins/storage/triggers.go                   |  93 +++++++
 26 files changed, 911 insertions(+), 375 deletions(-)
 create mode 100644 plugins/storage/.gitignore
 create mode 100644 plugins/storage/Makefile
 delete mode 100755 plugins/storage/commands
 delete mode 100755 plugins/storage/functions
 create mode 100644 plugins/storage/go.mod
 create mode 100644 plugins/storage/go.sum
 delete mode 100755 plugins/storage/help-functions
 delete mode 100755 plugins/storage/install
 delete mode 100755 plugins/storage/internal-functions
 delete mode 100755 plugins/storage/report
 create mode 100644 plugins/storage/src/commands/commands.go
 create mode 100644 plugins/storage/src/subcommands/subcommands.go
 create mode 100644 plugins/storage/src/triggers/triggers.go
 delete mode 100755 plugins/storage/storage-list
 create mode 100644 plugins/storage/storage.go
 create mode 100644 plugins/storage/storage_test.go
 create mode 100644 plugins/storage/subcommands.go
 delete mode 100755 plugins/storage/subcommands/default
 delete mode 100755 plugins/storage/subcommands/ensure-directory
 delete mode 100755 plugins/storage/subcommands/list
 delete mode 100755 plugins/storage/subcommands/mount
 delete mode 100755 plugins/storage/subcommands/report
 delete mode 100755 plugins/storage/subcommands/unmount
 create mode 100644 plugins/storage/triggers.go

diff --git a/plugins/docker-options/dockeroptions.go b/plugins/docker-options/dockeroptions.go
index 00c0fc906..bbe79bbad 100644
--- a/plugins/docker-options/dockeroptions.go
+++ b/plugins/docker-options/dockeroptions.go
@@ -88,6 +88,29 @@ func GetDockerOptionsForPhase(appName string, phase string) ([]string, error) {
 	return options, nil
 }
 
+// RemoveDockerOptionFromPhases removes a docker option from specified phases
+func RemoveDockerOptionFromPhases(appName string, phases []string, option string) error {
+	for _, phase := range phases {
+		options, err := GetDockerOptionsForPhase(appName, phase)
+		if err != nil {
+			return err
+		}
+
+		newOptions := []string{}
+		for _, opt := range options {
+			if opt != option {
+				newOptions = append(newOptions, opt)
+			}
+		}
+
+		sort.Strings(newOptions)
+		if err = writeDockerOptionsForPhase(appName, phase, newOptions); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
 // GetSpecifiedDockerOptionsForPhase returns the docker options for the specified phase that are in the desiredOptions list
 // It expects desiredOptions to be a list of docker options that are in the format "--option"
 // And will retrieve any lines that start with the desired option
diff --git a/plugins/storage/.gitignore b/plugins/storage/.gitignore
new file mode 100644
index 000000000..d3939e0d4
--- /dev/null
+++ b/plugins/storage/.gitignore
@@ -0,0 +1,8 @@
+/commands
+/subcommands/*
+/triggers/*
+/triggers
+/storage-*
+/install
+/post-*
+/report
diff --git a/plugins/storage/Makefile b/plugins/storage/Makefile
new file mode 100644
index 000000000..754299f43
--- /dev/null
+++ b/plugins/storage/Makefile
@@ -0,0 +1,7 @@
+GOARCH ?= amd64
+SUBCOMMANDS = subcommands/default subcommands/ensure-directory subcommands/list subcommands/mount subcommands/report subcommands/unmount
+TRIGGERS = triggers/install triggers/storage-list
+BUILD = commands subcommands triggers
+PLUGIN_NAME = storage
+
+include ../../common.mk
diff --git a/plugins/storage/bin/chown-storage-dir b/plugins/storage/bin/chown-storage-dir
index abb6ba032..c5bb21d39 100755
--- a/plugins/storage/bin/chown-storage-dir
+++ b/plugins/storage/bin/chown-storage-dir
@@ -16,10 +16,14 @@ main() {
     exit 1
   fi
 
-  if [[ "$CHOWN_ID" != "32767" ]] && [[ "$CHOWN_ID" != "1000" ]] && [[ "$CHOWN_ID" != "2000" ]]; then
-    echo " !     Unsupported chown permissions. Supported values: 32767, 1000, 2000"
-    exit 1
-  fi
+  case "$CHOWN_ID" in
+    0|1000|2000|32767|165536|166536|167536|198303)
+      ;;
+    *)
+      echo " !     Unsupported chown permissions. Supported values: 0, 1000, 2000, 32767 (and user namespace offset variants)" 1>&2
+      exit 1
+      ;;
+  esac
 
   chown -R "$CHOWN_ID:$CHOWN_ID" "${DOKKU_LIB_ROOT}/data/storage/$DIRECTORY"
 }
diff --git a/plugins/storage/commands b/plugins/storage/commands
deleted file mode 100755
index a3a329180..000000000
--- a/plugins/storage/commands
+++ /dev/null
@@ -1,16 +0,0 @@
-#!/usr/bin/env bash
-[[ " storage:help help " == *" $1 "* ]] || exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
-source "$PLUGIN_AVAILABLE_PATH/storage/help-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-case "$1" in
-  help | storage:help)
-    cmd-storage-help "$@"
-    ;;
-
-  *)
-    exit "$DOKKU_NOT_IMPLEMENTED_EXIT"
-    ;;
-
-esac
diff --git a/plugins/storage/functions b/plugins/storage/functions
deleted file mode 100755
index 611e92397..000000000
--- a/plugins/storage/functions
+++ /dev/null
@@ -1,31 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
-source "$PLUGIN_AVAILABLE_PATH/docker-options/functions"
-
-verify_paths() {
-  declare desc="verifies storage paths"
-  local -r passed_path=$1
-  if [[ "$passed_path" == /* ]]; then
-    echo "$passed_path" | grep -qe '^/.*\:/' || dokku_log_fail "Storage path must be two valid paths divided by colon."
-  else
-    echo "$passed_path" | grep -qe '^[a-zA-Z0-9]\{1\}[a-zA-Z0-9_.-]\+\:\/' || dokku_log_fail "Volume name must be two characters or more. Volume name must not contain invalid characters. Storage path must be two valid paths divided by colon."
-  fi
-
-}
-
-check_if_path_exists() {
-  declare desc="checks if path exists"
-  local -r passed_path=$1
-  local -r phase_file_path=$2
-  [[ -r "$phase_file_path" ]] && grep -qe "^-v $passed_path" "$phase_file_path"
-}
-
-get_bind_mounts() {
-  declare desc="strips docker options and prints mounts"
-  local -r phase_file_path=$1
-  if [[ -r "$phase_file_path" ]]; then
-    sed -e '/^-v/!d' -e 's/^-v //' <"$phase_file_path"
-  fi
-}
diff --git a/plugins/storage/go.mod b/plugins/storage/go.mod
new file mode 100644
index 000000000..92d3e62dc
--- /dev/null
+++ b/plugins/storage/go.mod
@@ -0,0 +1,37 @@
+module github.com/dokku/dokku/plugins/storage
+
+go 1.25.5
+
+require (
+	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
+	github.com/dokku/dokku/plugins/docker-options v0.0.0-00010101000000-000000000000
+	github.com/onsi/gomega v1.38.3
+	github.com/spf13/pflag v1.0.10
+)
+
+require (
+	github.com/alexellis/go-execute/v2 v2.2.1 // indirect
+	github.com/fatih/color v1.18.0 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/hashicorp/errwrap v1.0.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/kr/fs v0.1.0 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/melbahja/goph v1.4.0 // indirect
+	github.com/otiai10/copy v1.14.1 // indirect
+	github.com/otiai10/mint v1.6.3 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/pkg/sftp v1.13.5 // indirect
+	github.com/ryanuber/columnize v2.1.2+incompatible // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
+	golang.org/x/net v0.47.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
+)
+
+replace github.com/dokku/dokku/plugins/common => ../common
+
+replace github.com/dokku/dokku/plugins/docker-options => ../docker-options
diff --git a/plugins/storage/go.sum b/plugins/storage/go.sum
new file mode 100644
index 000000000..7e02672dd
--- /dev/null
+++ b/plugins/storage/go.sum
@@ -0,0 +1,108 @@
+github.com/Masterminds/semver/v3 v3.4.0 h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0=
+github.com/Masterminds/semver/v3 v3.4.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
+github.com/alexellis/go-execute/v2 v2.2.1 h1:4Ye3jiCKQarstODOEmqDSRCqxMHLkC92Bhse743RdOI=
+github.com/alexellis/go-execute/v2 v2.2.1/go.mod h1:FMdRnUTiFAmYXcv23txrp3VYZfLo24nMpiIneWgKHTQ=
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
+github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
+github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
+github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
+github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/pprof v0.0.0-20250403155104-27863c87afa6 h1:BHT72Gu3keYf3ZEu2J0b1vyeLSOYI8bm5wbJM/8yDe8=
+github.com/google/pprof v0.0.0-20250403155104-27863c87afa6/go.mod h1:boTsfXsheKC2y+lKOCMpSfarhxDeIzfZG1jqGcPl3cA=
+github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
+github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
+github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
+github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
+github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
+github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
+github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
+github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
+github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
+github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
+github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
+github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
+github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
+github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
+github.com/otiai10/mint v1.6.3/go.mod h1:MJm72SBthJjz8qhefc4z1PYEieWmy8Bku7CjcAqyUSM=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pkg/sftp v1.13.5 h1:a3RLUqkyjYRtBTZJZ1VRrKbN3zhuPLlUc3sphVz81go=
+github.com/pkg/sftp v1.13.5/go.mod h1:wHDZ0IZX6JcBYRK1TH9bcVq8G7TLpVHYIGJRFnmPfxg=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/ryanuber/columnize v2.1.2+incompatible h1:C89EOx/XBWwIXl8wm8OPJBd7kPF25UfsK2X7Ph/zCAk=
+github.com/ryanuber/columnize v2.1.2+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
+github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
+github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
+go.uber.org/automaxprocs v1.6.0 h1:O3y2/QNTOdbF+e/dpXNNW7Rx2hZ4sTIPyybbxyNqTUs=
+go.uber.org/automaxprocs v1.6.0/go.mod h1:ifeIMSnPZuznNm6jmdzmU3/bfk01Fe2fotchwEFJ8r8=
+go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
+go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
+golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
+golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
+golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
+golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
+golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/plugins/storage/help-functions b/plugins/storage/help-functions
deleted file mode 100755
index 14ce66f57..000000000
--- a/plugins/storage/help-functions
+++ /dev/null
@@ -1,36 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-storage-help() {
-  declare desc="help command"
-  declare CMD="$1"
-  local plugin_name="storage"
-  local plugin_description="Manage mounted volumes"
-
-  if [[ "$CMD" == "${plugin_name}:help" ]]; then
-    echo -e "Usage: dokku ${plugin_name}[:COMMAND]"
-    echo ''
-    echo "$plugin_description"
-    echo ''
-    echo 'Additional commands:'
-    fn-help-content | sort | column -c2 -t -s,
-  elif [[ $(ps -o command= $PPID) == *"--all"* ]]; then
-    fn-help-content
-  else
-    cat <<help_desc
-    $plugin_name, $plugin_description
-help_desc
-  fi
-}
-
-fn-help-content() {
-  declare desc="return help content"
-  cat <<help_content
-    storage:ensure-directory [--chown option] <directory>, Creates a persistent storage directory in the recommended storage path
-    storage:list <app> [--format text|json], List bind mounts for app's container(s) (host:container)
-    storage:mount <app> <host-dir:container-dir>, Create a new bind mount
-    storage:report [<app>] [<flag>], Displays a checks report for one or more apps
-    storage:unmount <app> <host-dir:container-dir>, Remove an existing bind mount
-help_content
-}
diff --git a/plugins/storage/install b/plugins/storage/install
deleted file mode 100755
index 1af69cb29..000000000
--- a/plugins/storage/install
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-trigger-storage-install() {
-  declare desc="storage install trigger"
-  declare trigger="install"
-
-  mkdir -p "${DOKKU_LIB_ROOT}/data/storage"
-  chown "${DOKKU_SYSTEM_USER}:${DOKKU_SYSTEM_GROUP}" "${DOKKU_LIB_ROOT}/data/storage"
-
-  STORAGE_SUDOERS_FILE="/etc/sudoers.d/dokku-storage"
-  local mode="0440"
-  case "$DOKKU_DISTRO" in
-    arch | debian | raspbian | ubuntu)
-      echo "%dokku ALL=(ALL) NOPASSWD:$PLUGIN_AVAILABLE_PATH/storage/bin/chown-storage-dir *" >"$STORAGE_SUDOERS_FILE"
-      echo "Defaults env_keep += \"DOKKU_LIB_ROOT\"" >>"$STORAGE_SUDOERS_FILE"
-      ;;
-  esac
-
-  chmod "$mode" "$STORAGE_SUDOERS_FILE"
-}
-
-trigger-storage-install "$@"
diff --git a/plugins/storage/internal-functions b/plugins/storage/internal-functions
deleted file mode 100755
index a130b9bcc..000000000
--- a/plugins/storage/internal-functions
+++ /dev/null
@@ -1,168 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
-source "$PLUGIN_AVAILABLE_PATH/docker-options/functions"
-source "$PLUGIN_AVAILABLE_PATH/storage/functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-storage-ensure-directory() {
-  declare desc="creates a persistent storage directory in the recommended storage path"
-  declare cmd="storage:ensure-directory"
-  [[ "$1" == "$cmd" ]] && shift 1
-  declare DIRECTORY CHOWN_FLAG
-
-  CHOWN_FLAG=herokuish
-  skip=false
-  for arg in "$@"; do
-    if [[ "$arg" == "--chown" ]]; then
-      skip=true
-      continue
-    fi
-
-    if [[ "$skip" == "true" ]]; then
-      CHOWN_FLAG="$arg"
-      skip=false
-      continue
-    fi
-
-    if [[ -z "$DIRECTORY" ]]; then
-      DIRECTORY="$arg"
-    fi
-  done
-
-  if [[ -z "$DIRECTORY" ]]; then
-    dokku_log_fail "Please specify a directory to create"
-  fi
-
-  if [[ ! "$DIRECTORY" =~ ^[A-Za-z0-9\\_-]+$ ]]; then
-    dokku_log_fail "Directory can only contain the following set of characters: [A-Za-z0-9_-]"
-  fi
-
-  if [[ "$CHOWN_FLAG" == "herokuish" ]]; then
-    CHOWN_FLAG="32767"
-  elif [[ "$CHOWN_FLAG" == "heroku" ]]; then
-    CHOWN_FLAG="1000"
-  elif [[ "$CHOWN_FLAG" == "packeto" ]]; then
-    CHOWN_FLAG="2000"
-    dokku_log_verbose "Detected deprecated chown flag 'packeto'. Using 'paketo' instead. Please update your configuration."
-  elif [[ "$CHOWN_FLAG" == "paketo" ]]; then
-    CHOWN_FLAG="2000"
-  elif [[ "$CHOWN_FLAG" == "root" ]]; then
-    CHOWN_FLAG="0"
-  elif [[ "$CHOWN_FLAG" == "false" ]]; then
-    CHOWN_FLAG="false"
-  else
-    dokku_log_fail "Unsupported chown permissions"
-  fi
-
-  userns_enabled="$(docker info -f '{{range .SecurityOptions}}{{if eq . "name=userns"}}true{{end}}{{end}}')"
-  if [[ "$userns_enabled" == "true" ]] && [[ "$CHOWN_FLAG" != "false" ]]; then
-    CHOWN_FLAG=$((CHOWN_FLAG + 165536))
-  fi
-
-  local storage_directory="${DOKKU_LIB_ROOT}/data/storage/$DIRECTORY"
-  dokku_log_info1 "Ensuring ${storage_directory} exists"
-  mkdir -p "${storage_directory}"
-  if [[ "$CHOWN_FLAG" != "false" ]]; then
-    dokku_log_verbose_quiet "Setting directory ownership to $CHOWN_FLAG:$CHOWN_FLAG"
-    sudo "$PLUGIN_AVAILABLE_PATH/storage/bin/chown-storage-dir" "$DIRECTORY" "$CHOWN_FLAG"
-  fi
-
-  dokku_log_verbose_quiet "Directory ready for mounting"
-}
-
-cmd-storage-report() {
-  declare desc="displays a storage report for one or more apps"
-  declare cmd="storage:report"
-  [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1" INFO_FLAG="$2"
-
-  if [[ -n "$APP" ]] && [[ "$APP" == --* ]]; then
-    INFO_FLAG="$APP"
-    APP=""
-  fi
-
-  if [[ -z "$APP" ]] && [[ -z "$INFO_FLAG" ]]; then
-    INFO_FLAG="true"
-  fi
-
-  if [[ -z "$APP" ]]; then
-    for app in $(dokku_apps); do
-      cmd-storage-report-single "$app" "$INFO_FLAG" | tee || true
-    done
-  else
-    cmd-storage-report-single "$APP" "$INFO_FLAG"
-  fi
-}
-
-cmd-storage-report-single() {
-  declare APP="$1" INFO_FLAG="$2"
-  if [[ "$INFO_FLAG" == "true" ]]; then
-    INFO_FLAG=""
-  fi
-  verify_app_name "$APP"
-  local flag_map=(
-    "--storage-build-mounts: $(fn-storage-bind-mounts "$APP" build)"
-    "--storage-deploy-mounts: $(fn-storage-bind-mounts "$APP" deploy)"
-    "--storage-run-mounts: $(fn-storage-bind-mounts "$APP" run)"
-  )
-
-  if [[ -z "$INFO_FLAG" ]]; then
-    dokku_log_info2_quiet "$APP storage information"
-    for flag in "${flag_map[@]}"; do
-      key="$(echo "${flag#--}" | cut -f1 -d' ' | tr - ' ')"
-      dokku_log_verbose "$(printf "%-30s %-25s" "${key^}" "${flag#*: }")"
-    done
-  else
-    local match=false
-    local value_exists=false
-    for flag in "${flag_map[@]}"; do
-      valid_flags="${valid_flags} $(echo "$flag" | cut -d':' -f1)"
-      if [[ "$flag" == "${INFO_FLAG}:"* ]]; then
-        value=${flag#*: }
-        size="${#value}"
-        if [[ "$size" -ne 0 ]]; then
-          echo "$value" && match=true && value_exists=true
-        else
-          match=true
-        fi
-      fi
-    done
-    [[ "$match" == "true" ]] || dokku_log_fail "Invalid flag passed, valid flags:${valid_flags}"
-    [[ "$value_exists" == "true" ]] || dokku_log_fail "not deployed"
-  fi
-}
-
-fn-storage-bind-mounts() {
-  declare APP="$1" PHASE="$2"
-  local PHASE_FILE="$(fn-get-phase-file-path "$APP" "$PHASE")"
-  if [[ -r "$PHASE_FILE" ]]; then
-    sed -e '/^-v/!d' "$PHASE_FILE" | tr '\n' ' '
-  fi
-}
-
-cmd-storage-list() {
-  declare desc="List all bound mounts"
-  declare cmd="storage:list"
-  [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1" FORMAT_FLAG="$2" FORMAT_FLAG_VALUE="$3"
-  local phase="deploy" format="text"
-
-  if [[ "$FORMAT_FLAG" == "--format" ]]; then
-    if [[ "$FORMAT_FLAG_VALUE" == "json" ]] || [[ "$FORMAT_FLAG_VALUE" == "text" ]]; then
-      format="$FORMAT_FLAG_VALUE"
-    else
-      dokku_log_fail "Invalid --format value specified"
-    fi
-  elif [[ -n "$FORMAT_FLAG" ]]; then
-    dokku_log_fail "Invalid argument specified"
-  fi
-
-  verify_app_name "$APP"
-  if [[ "$FORMAT_FLAG_VALUE" == "text" ]]; then
-    dokku_log_info1_quiet "$APP volume bind-mounts:"
-    plugn trigger storage-list "$APP" "$phase" "$format" | sed "s/^/       /"
-  else
-    plugn trigger storage-list "$APP" "$phase" "$format"
-  fi
-}
diff --git a/plugins/storage/report b/plugins/storage/report
deleted file mode 100755
index e2afe3561..000000000
--- a/plugins/storage/report
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_AVAILABLE_PATH/storage/internal-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-storage-report-single "$@"
diff --git a/plugins/storage/src/commands/commands.go b/plugins/storage/src/commands/commands.go
new file mode 100644
index 000000000..8ad0b2de8
--- /dev/null
+++ b/plugins/storage/src/commands/commands.go
@@ -0,0 +1,60 @@
+package main
+
+import (
+	"flag"
+	"fmt"
+	"os"
+	"strconv"
+	"strings"
+
+	"github.com/dokku/dokku/plugins/common"
+)
+
+const (
+	helpHeader = `Usage: dokku storage[:COMMAND]
+
+Manage mounted volumes
+
+Additional commands:`
+
+	helpContent = `
+    storage:ensure-directory [--chown option] <directory>, Creates a persistent storage directory in the recommended storage path
+    storage:list <app> [--format text|json], List bind mounts for app's container(s) (host:container)
+    storage:mount <app> <host-dir:container-dir>, Create a new bind mount
+    storage:report [<app>] [<flag>], Displays a storage report for one or more apps
+    storage:unmount <app> <host-dir:container-dir>, Remove an existing bind mount`
+)
+
+func main() {
+	flag.Usage = usage
+	flag.Parse()
+
+	cmd := flag.Arg(0)
+	switch cmd {
+	case "storage":
+		usage()
+	case "storage:help":
+		usage()
+	case "help":
+		result, err := common.CallExecCommand(common.ExecCommandInput{
+			Command: "ps",
+			Args:    []string{"-o", "command=", strconv.Itoa(os.Getppid())},
+		})
+		if err == nil && strings.Contains(result.StdoutContents(), "--all") {
+			fmt.Println(helpContent)
+		} else {
+			fmt.Print("\n    storage, Manage mounted volumes\n")
+		}
+	default:
+		dokkuNotImplementExitCode, err := strconv.Atoi(os.Getenv("DOKKU_NOT_IMPLEMENTED_EXIT"))
+		if err != nil {
+			fmt.Println("failed to retrieve DOKKU_NOT_IMPLEMENTED_EXIT environment variable")
+			dokkuNotImplementExitCode = 10
+		}
+		os.Exit(dokkuNotImplementExitCode)
+	}
+}
+
+func usage() {
+	common.CommandUsage(helpHeader, helpContent)
+}
diff --git a/plugins/storage/src/subcommands/subcommands.go b/plugins/storage/src/subcommands/subcommands.go
new file mode 100644
index 000000000..ef13038d8
--- /dev/null
+++ b/plugins/storage/src/subcommands/subcommands.go
@@ -0,0 +1,72 @@
+package main
+
+import (
+	"fmt"
+	"os"
+	"strings"
+
+	"github.com/dokku/dokku/plugins/common"
+	"github.com/dokku/dokku/plugins/storage"
+
+	flag "github.com/spf13/pflag"
+)
+
+func main() {
+	parts := strings.Split(os.Args[0], "/")
+	subcommand := parts[len(parts)-1]
+
+	var err error
+	switch subcommand {
+	case "default":
+		err = storage.CommandHelp()
+	case "ensure-directory":
+		args := flag.NewFlagSet("storage:ensure-directory", flag.ExitOnError)
+		chown := args.String("chown", "herokuish", "--chown: chown option (herokuish, heroku, paketo, root, false)")
+		args.Parse(os.Args[2:])
+		directory := args.Arg(0)
+		err = storage.CommandEnsureDirectory(directory, *chown)
+	case "list":
+		args := flag.NewFlagSet("storage:list", flag.ExitOnError)
+		format := args.String("format", "text", "--format: output format (text, json)")
+		args.Parse(os.Args[2:])
+		appName := args.Arg(0)
+		err = storage.CommandList(appName, *format)
+	case "mount":
+		args := flag.NewFlagSet("storage:mount", flag.ExitOnError)
+		args.Parse(os.Args[2:])
+		appName := args.Arg(0)
+		mountPath := args.Arg(1)
+		err = storage.CommandMount(appName, mountPath)
+	case "report":
+		args := flag.NewFlagSet("storage:report", flag.ExitOnError)
+		format := args.String("format", "stdout", "--format: output format (stdout, json)")
+		args.Parse(os.Args[2:])
+
+		osArgs, infoFlag, parseErr := common.ParseReportArgs("storage", args.Args())
+		if parseErr != nil {
+			err = parseErr
+		} else {
+			appName := ""
+			if len(osArgs) > 0 {
+				appName = osArgs[0]
+			}
+			if *format == "stdout" {
+				err = storage.CommandReport(appName, infoFlag)
+			} else {
+				err = storage.CommandReportSingleApp(appName, infoFlag, *format)
+			}
+		}
+	case "unmount":
+		args := flag.NewFlagSet("storage:unmount", flag.ExitOnError)
+		args.Parse(os.Args[2:])
+		appName := args.Arg(0)
+		mountPath := args.Arg(1)
+		err = storage.CommandUnmount(appName, mountPath)
+	default:
+		err = fmt.Errorf("Invalid plugin subcommand call: %s", subcommand)
+	}
+
+	if err != nil {
+		common.LogFailWithError(err)
+	}
+}
diff --git a/plugins/storage/src/triggers/triggers.go b/plugins/storage/src/triggers/triggers.go
new file mode 100644
index 000000000..3d2dd3ebf
--- /dev/null
+++ b/plugins/storage/src/triggers/triggers.go
@@ -0,0 +1,34 @@
+package main
+
+import (
+	"flag"
+	"fmt"
+	"os"
+	"strings"
+
+	"github.com/dokku/dokku/plugins/common"
+	"github.com/dokku/dokku/plugins/storage"
+)
+
+func main() {
+	parts := strings.Split(os.Args[0], "/")
+	trigger := parts[len(parts)-1]
+	flag.Parse()
+
+	var err error
+	switch trigger {
+	case "install":
+		err = storage.TriggerInstall()
+	case "storage-list":
+		appName := flag.Arg(0)
+		phase := flag.Arg(1)
+		format := flag.Arg(2)
+		err = storage.TriggerStorageList(appName, phase, format)
+	default:
+		err = fmt.Errorf("Invalid plugin trigger call: %s", trigger)
+	}
+
+	if err != nil {
+		common.LogFailWithError(err)
+	}
+}
diff --git a/plugins/storage/storage-list b/plugins/storage/storage-list
deleted file mode 100755
index aeb177829..000000000
--- a/plugins/storage/storage-list
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_AVAILABLE_PATH/docker-options/functions"
-source "$PLUGIN_AVAILABLE_PATH/storage/functions"
-
-trigger-storage-storage-list() {
-  declare desc="storage storage-list trigger"
-  declare trigger="storage-list"
-  declare APP="$1" PHASE="$2" FORMAT="$3"
-
-  if [[ "$FORMAT" != "json" ]]; then
-    get_bind_mounts "$(fn-get-phase-file-path "$APP" "$PHASE")"
-  else
-    while read -r line; do
-      local host_path="$(awk -F: '{print $1}' <<<"$line")"
-      local container_path="$(awk -F: '{print $2}' <<<"$line")"
-      local volume_options="$(awk -F: '{print $3}' <<<"$line")"
-      jq -n --arg host_path "$host_path" --arg container_path "$container_path" --arg volume_options "$volume_options" '{host_path: $host_path, container_path: $container_path, volume_options: $volume_options}'
-    done < <(get_bind_mounts "$(fn-get-phase-file-path "$APP" "$PHASE")") | jq -M -n '[inputs]'
-  fi
-}
-
-trigger-storage-storage-list "$@"
diff --git a/plugins/storage/storage.go b/plugins/storage/storage.go
new file mode 100644
index 000000000..386cec11d
--- /dev/null
+++ b/plugins/storage/storage.go
@@ -0,0 +1,130 @@
+package storage
+
+import (
+	"errors"
+	"fmt"
+	"regexp"
+	"strings"
+
+	"github.com/dokku/dokku/plugins/common"
+	dockeroptions "github.com/dokku/dokku/plugins/docker-options"
+)
+
+// MountPhases are the phases where storage mounts are applied
+var MountPhases = []string{"deploy", "run"}
+
+// VerifyPaths validates the storage mount path format
+func VerifyPaths(mountPath string) error {
+	if strings.HasPrefix(mountPath, "/") {
+		matched, err := regexp.MatchString(`^/.*:/`, mountPath)
+		if err != nil {
+			return err
+		}
+		if !matched {
+			return errors.New("Storage path must be two valid paths divided by colon.")
+		}
+	} else {
+		matched, err := regexp.MatchString(`^[a-zA-Z0-9][a-zA-Z0-9_.-]+:/`, mountPath)
+		if err != nil {
+			return err
+		}
+		if !matched {
+			return errors.New("Volume name must be two characters or more. Volume name must not contain invalid characters. Storage path must be two valid paths divided by colon.")
+		}
+	}
+	return nil
+}
+
+// CheckIfPathExists checks if a mount path exists in the specified phases
+func CheckIfPathExists(appName string, mountPath string, phases []string) bool {
+	for _, phase := range phases {
+		options, err := dockeroptions.GetDockerOptionsForPhase(appName, phase)
+		if err != nil {
+			continue
+		}
+		for _, option := range options {
+			if option == fmt.Sprintf("-v %s", mountPath) {
+				return true
+			}
+		}
+	}
+	return false
+}
+
+// GetBindMounts returns the bind mounts for an app and phase
+func GetBindMounts(appName string, phase string) ([]string, error) {
+	mounts := []string{}
+	options, err := dockeroptions.GetDockerOptionsForPhase(appName, phase)
+	if err != nil {
+		return mounts, err
+	}
+
+	for _, option := range options {
+		if strings.HasPrefix(option, "-v ") {
+			mount := strings.TrimPrefix(option, "-v ")
+			mounts = append(mounts, mount)
+		}
+	}
+	return mounts, nil
+}
+
+// GetBindMountsForDisplay returns the bind mounts formatted for display
+func GetBindMountsForDisplay(appName string, phase string) string {
+	mounts, err := GetBindMounts(appName, phase)
+	if err != nil {
+		return ""
+	}
+
+	result := []string{}
+	for _, mount := range mounts {
+		result = append(result, fmt.Sprintf("-v %s", mount))
+	}
+	return strings.Join(result, " ")
+}
+
+// StorageListEntry represents a storage mount entry for JSON output
+type StorageListEntry struct {
+	HostPath      string `json:"host_path"`
+	ContainerPath string `json:"container_path"`
+	VolumeOptions string `json:"volume_options"`
+}
+
+// ParseMountPath parses a mount path into its components
+func ParseMountPath(mountPath string) StorageListEntry {
+	parts := strings.SplitN(mountPath, ":", 3)
+	entry := StorageListEntry{}
+
+	if len(parts) >= 1 {
+		entry.HostPath = parts[0]
+	}
+	if len(parts) >= 2 {
+		entry.ContainerPath = parts[1]
+	}
+	if len(parts) >= 3 {
+		entry.VolumeOptions = parts[2]
+	}
+
+	return entry
+}
+
+// GetStorageDirectory returns the storage directory path
+func GetStorageDirectory() string {
+	dokkuLibRoot := common.GetenvWithDefault("DOKKU_LIB_ROOT", "/var/lib/dokku")
+	return fmt.Sprintf("%s/data/storage", dokkuLibRoot)
+}
+
+// ValidateDirectoryName validates a storage directory name
+func ValidateDirectoryName(directory string) error {
+	if directory == "" {
+		return errors.New("Please specify a directory to create")
+	}
+
+	matched, err := regexp.MatchString(`^[A-Za-z0-9_-]+$`, directory)
+	if err != nil {
+		return err
+	}
+	if !matched {
+		return errors.New("Directory can only contain the following set of characters: [A-Za-z0-9_-]")
+	}
+	return nil
+}
diff --git a/plugins/storage/storage_test.go b/plugins/storage/storage_test.go
new file mode 100644
index 000000000..305680d3c
--- /dev/null
+++ b/plugins/storage/storage_test.go
@@ -0,0 +1,90 @@
+package storage
+
+import (
+	"testing"
+
+	. "github.com/onsi/gomega"
+)
+
+func TestVerifyPathsAbsolutePath(t *testing.T) {
+	RegisterTestingT(t)
+
+	Expect(VerifyPaths("/host/path:/container/path")).To(Succeed())
+	Expect(VerifyPaths("/var/lib/dokku/data/storage/test:/app/data")).To(Succeed())
+}
+
+func TestVerifyPathsNamedVolume(t *testing.T) {
+	RegisterTestingT(t)
+
+	Expect(VerifyPaths("volume_name:/container/path")).To(Succeed())
+	Expect(VerifyPaths("my-volume:/app/data")).To(Succeed())
+	Expect(VerifyPaths("my.volume:/app/data")).To(Succeed())
+}
+
+func TestVerifyPathsInvalid(t *testing.T) {
+	RegisterTestingT(t)
+
+	err := VerifyPaths("/host/path")
+	Expect(err).To(HaveOccurred())
+	Expect(err.Error()).To(ContainSubstring("Storage path must be two valid paths divided by colon"))
+
+	err = VerifyPaths("a:/container")
+	Expect(err).To(HaveOccurred())
+	Expect(err.Error()).To(ContainSubstring("Volume name must be two characters or more"))
+
+	err = VerifyPaths("-invalid:/container")
+	Expect(err).To(HaveOccurred())
+}
+
+func TestValidateDirectoryName(t *testing.T) {
+	RegisterTestingT(t)
+
+	Expect(ValidateDirectoryName("myapp")).To(Succeed())
+	Expect(ValidateDirectoryName("my-app")).To(Succeed())
+	Expect(ValidateDirectoryName("my_app")).To(Succeed())
+	Expect(ValidateDirectoryName("MyApp123")).To(Succeed())
+}
+
+func TestValidateDirectoryNameInvalid(t *testing.T) {
+	RegisterTestingT(t)
+
+	err := ValidateDirectoryName("")
+	Expect(err).To(HaveOccurred())
+	Expect(err.Error()).To(ContainSubstring("Please specify a directory"))
+
+	err = ValidateDirectoryName("@invalid")
+	Expect(err).To(HaveOccurred())
+	Expect(err.Error()).To(ContainSubstring("Directory can only contain"))
+
+	err = ValidateDirectoryName("my/app")
+	Expect(err).To(HaveOccurred())
+
+	err = ValidateDirectoryName("my app")
+	Expect(err).To(HaveOccurred())
+}
+
+func TestParseMountPath(t *testing.T) {
+	RegisterTestingT(t)
+
+	entry := ParseMountPath("/host/path:/container/path")
+	Expect(entry.HostPath).To(Equal("/host/path"))
+	Expect(entry.ContainerPath).To(Equal("/container/path"))
+	Expect(entry.VolumeOptions).To(BeEmpty())
+
+	entry = ParseMountPath("/host/path:/container/path:ro")
+	Expect(entry.HostPath).To(Equal("/host/path"))
+	Expect(entry.ContainerPath).To(Equal("/container/path"))
+	Expect(entry.VolumeOptions).To(Equal("ro"))
+
+	entry = ParseMountPath("volume_name:/container/path")
+	Expect(entry.HostPath).To(Equal("volume_name"))
+	Expect(entry.ContainerPath).To(Equal("/container/path"))
+	Expect(entry.VolumeOptions).To(BeEmpty())
+}
+
+func TestGetStorageDirectory(t *testing.T) {
+	RegisterTestingT(t)
+
+	dir := GetStorageDirectory()
+	Expect(dir).To(ContainSubstring("data/storage"))
+}
diff --git a/plugins/storage/subcommands.go b/plugins/storage/subcommands.go
new file mode 100644
index 000000000..d54c24bf5
--- /dev/null
+++ b/plugins/storage/subcommands.go
@@ -0,0 +1,241 @@
+package storage
+
+import (
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/dokku/dokku/plugins/common"
+	dockeroptions "github.com/dokku/dokku/plugins/docker-options"
+)
+
+const (
+	helpHeader = `Usage: dokku storage[:COMMAND]
+
+Manage mounted volumes
+
+Additional commands:`
+
+	helpContent = `
+    storage:ensure-directory [--chown option] <directory>, Creates a persistent storage directory in the recommended storage path
+    storage:list <app> [--format text|json], List bind mounts for app's container(s) (host:container)
+    storage:mount <app> <host-dir:container-dir>, Create a new bind mount
+    storage:report [<app>] [<flag>], Displays a storage report for one or more apps
+    storage:unmount <app> <host-dir:container-dir>, Remove an existing bind mount`
+)
+
+// CommandHelp displays help for the storage plugin
+func CommandHelp() error {
+	common.CommandUsage(helpHeader, helpContent)
+	return nil
+}
+
+// CommandEnsureDirectory creates a persistent storage directory
+func CommandEnsureDirectory(directory string, chownFlag string) error {
+	if err := ValidateDirectoryName(directory); err != nil {
+		return err
+	}
+
+	chownID, err := resolveChownID(chownFlag)
+	if err != nil {
+		return err
+	}
+
+	storageDirectory := filepath.Join(GetStorageDirectory(), directory)
+	common.LogInfo1(fmt.Sprintf("Ensuring %s exists", storageDirectory))
+
+	if err := os.MkdirAll(storageDirectory, 0755); err != nil {
+		return fmt.Errorf("Unable to create directory: %s", err.Error())
+	}
+
+	if chownID != "false" {
+		common.LogVerboseQuiet(fmt.Sprintf("Setting directory ownership to %s:%s", chownID, chownID))
+
+		pluginPath := common.MustGetEnv("PLUGIN_AVAILABLE_PATH")
+		chownScript := filepath.Join(pluginPath, "storage", "bin", "chown-storage-dir")
+
+		result, err := common.CallExecCommand(common.ExecCommandInput{
+			Command: "sudo",
+			Args:    []string{chownScript, directory, chownID},
+		})
+		if err != nil {
+			return fmt.Errorf("Unable to set directory ownership: %s", err.Error())
+		}
+		if result.ExitCode != 0 {
+			return fmt.Errorf("Unable to set directory ownership: %s", result.StderrContents())
+		}
+	}
+
+	common.LogVerboseQuiet("Directory ready for mounting")
+	return nil
+}
+
+// resolveChownID converts a chown flag value to a numeric UID
+func resolveChownID(chownFlag string) (string, error) {
+	var chownID string
+
+	switch chownFlag {
+	case "herokuish":
+		chownID = "32767"
+	case "heroku":
+		chownID = "1000"
+	case "packeto":
+		common.LogVerbose("Detected deprecated chown flag 'packeto'. Using 'paketo' instead. Please update your configuration.")
+		chownID = "2000"
+	case "paketo":
+		chownID = "2000"
+	case "root":
+		chownID = "0"
+	case "false":
+		return "false", nil
+	default:
+		return "", errors.New("Unsupported chown permissions")
+	}
+
+	userns, err := isUserNamespacesEnabled()
+	if err != nil {
+		return "", err
+	}
+
+	if userns && chownID != "false" {
+		uid := 0
+		fmt.Sscanf(chownID, "%d", &uid)
+		uid += 165536
+		chownID = fmt.Sprintf("%d", uid)
+	}
+
+	return chownID, nil
+}
+
+// isUserNamespacesEnabled checks if Docker user namespaces are enabled
+func isUserNamespacesEnabled() (bool, error) {
+	result, err := common.CallExecCommand(common.ExecCommandInput{
+		Command: common.DockerBin(),
+		Args:    []string{"info", "-f", "{{range .SecurityOptions}}{{if eq . \"name=userns\"}}true{{end}}{{end}}"},
+	})
+	if err != nil {
+		return false, err
+	}
+	return strings.TrimSpace(result.StdoutContents()) == "true", nil
+}
+
+// CommandMount creates a new bind mount for an app
+func CommandMount(appName string, mountPath string) error {
+	if err := common.VerifyAppName(appName); err != nil {
+		return err
+	}
+
+	if err := VerifyPaths(mountPath); err != nil {
+		return err
+	}
+
+	if CheckIfPathExists(appName, mountPath, MountPhases) {
+		return errors.New("Mount path already exists.")
+	}
+
+	return dockeroptions.AddDockerOptionToPhases(appName, MountPhases, fmt.Sprintf("-v %s", mountPath))
+}
+
+// CommandUnmount removes an existing bind mount from an app
+func CommandUnmount(appName string, mountPath string) error {
+	if err := common.VerifyAppName(appName); err != nil {
+		return err
+	}
+
+	if err := VerifyPaths(mountPath); err != nil {
+		return err
+	}
+
+	if !CheckIfPathExists(appName, mountPath, MountPhases) {
+		return errors.New("Mount path does not exist.")
+	}
+
+	return dockeroptions.RemoveDockerOptionFromPhases(appName, MountPhases, fmt.Sprintf("-v %s", mountPath))
+}
+
+// CommandList lists all bind mounts for an app
+func CommandList(appName string, format string) error {
+	if err := common.VerifyAppName(appName); err != nil {
+		return err
+	}
+
+	if format != "text" && format != "json" {
+		return errors.New("Invalid --format value specified")
+	}
+
+	if format == "text" {
+		common.LogInfo1Quiet(fmt.Sprintf("%s volume bind-mounts:", appName))
+	}
+
+	results, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
+		Trigger: "storage-list",
+		Args:    []string{appName, "deploy", format},
+	})
+	if err != nil {
+		return err
+	}
+
+	output := results.StdoutContents()
+	if format == "text" && output != "" {
+		lines := strings.Split(strings.TrimSpace(output), "\n")
+		for _, line := range lines {
+			if line != "" {
+				if os.Getenv("DOKKU_QUIET_OUTPUT") != "" {
+					fmt.Println(line)
+				} else {
+					common.LogVerbose(line)
+				}
+			}
+		}
+	} else if output != "" {
+		fmt.Println(output)
+	}
+
+	return nil
+}
+
+// CommandReport displays a storage report for one or more apps
+func CommandReport(appName string, infoFlag string) error {
+	if appName == "" {
+		apps, err := common.DokkuApps()
+		if err != nil {
+			return err
+		}
+
+		for _, app := range apps {
+			if err := reportSingle(app, infoFlag, "stdout"); err != nil {
+				return err
+			}
+		}
+		return nil
+	}
+
+	return reportSingle(appName, infoFlag, "stdout")
+}
+
+// CommandReportSingleApp displays a storage report for a single app with format support
+func CommandReportSingleApp(appName string, infoFlag string, format string) error {
+	return reportSingle(appName, infoFlag, format)
+}
+
+func reportSingle(appName string, infoFlag string, format string) error {
+	if err := common.VerifyAppName(appName); err != nil {
+		return err
+	}
+
+	infoFlags := map[string]string{
+		"--storage-build-mounts":  GetBindMountsForDisplay(appName, "build"),
+		"--storage-deploy-mounts": GetBindMountsForDisplay(appName, "deploy"),
+		"--storage-run-mounts":    GetBindMountsForDisplay(appName, "run"),
+	}
+
+	infoFlagKeys := []string{
+		"--storage-build-mounts",
+		"--storage-deploy-mounts",
+		"--storage-run-mounts",
+	}
+
+	return common.ReportSingleApp("storage", appName, infoFlag, infoFlags, infoFlagKeys, format, true, true)
+}
diff --git a/plugins/storage/subcommands/default b/plugins/storage/subcommands/default
deleted file mode 100755
index 1995ae785..000000000
--- a/plugins/storage/subcommands/default
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_AVAILABLE_PATH/storage/help-functions"
-
-cmd-storage-help "storage:help"
diff --git a/plugins/storage/subcommands/ensure-directory b/plugins/storage/subcommands/ensure-directory
deleted file mode 100755
index bbce7325d..000000000
--- a/plugins/storage/subcommands/ensure-directory
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_AVAILABLE_PATH/storage/internal-functions"
-
-cmd-storage-ensure-directory "$@"
diff --git a/plugins/storage/subcommands/list b/plugins/storage/subcommands/list
deleted file mode 100755
index 337a396e3..000000000
--- a/plugins/storage/subcommands/list
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_AVAILABLE_PATH/storage/internal-functions"
-
-cmd-storage-list "$@"
diff --git a/plugins/storage/subcommands/mount b/plugins/storage/subcommands/mount
deleted file mode 100755
index 27ad9a06c..000000000
--- a/plugins/storage/subcommands/mount
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
-source "$PLUGIN_AVAILABLE_PATH/storage/functions"
-source "$PLUGIN_AVAILABLE_PATH/docker-options/functions"
-
-cmd-storage-mount() {
-  declare desc="Add bind-mount, redeploy app if running"
-  declare cmd="storage:mount"
-  [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1" MOUNT_PATH="$2"
-  local passed_phases=(deploy run)
-
-  verify_app_name "$APP"
-  verify_paths "$MOUNT_PATH"
-  check_if_path_exists "$MOUNT_PATH" "$(get_phase_file_path "${passed_phases[@]}")" && dokku_log_fail "Mount path already exists."
-  add_passed_docker_option passed_phases[@] "-v $MOUNT_PATH"
-}
-
-cmd-storage-mount "$@"
diff --git a/plugins/storage/subcommands/report b/plugins/storage/subcommands/report
deleted file mode 100755
index 6787888bb..000000000
--- a/plugins/storage/subcommands/report
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-source "$PLUGIN_AVAILABLE_PATH/storage/internal-functions"
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-
-cmd-storage-report "$@"
diff --git a/plugins/storage/subcommands/unmount b/plugins/storage/subcommands/unmount
deleted file mode 100755
index 941060302..000000000
--- a/plugins/storage/subcommands/unmount
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-[[ $DOKKU_TRACE ]] && set -x
-source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
-source "$PLUGIN_AVAILABLE_PATH/storage/functions"
-source "$PLUGIN_AVAILABLE_PATH/docker-options/functions"
-
-cmd-storage-unmount() {
-  declare desc="Remove bind-mount, restart app if running"
-  declare cmd="storage:unmount"
-  [[ "$1" == "$cmd" ]] && shift 1
-  declare APP="$1" MOUNT_PATH="$2"
-  local passed_phases=(deploy run)
-
-  verify_app_name "$APP"
-  verify_paths "$MOUNT_PATH"
-  check_if_path_exists "$MOUNT_PATH" "$(get_phase_file_path "${passed_phases[@]}")" || dokku_log_fail "Mount path does not exist."
-  remove_passed_docker_option passed_phases[@] "-v $MOUNT_PATH"
-}
-
-cmd-storage-unmount "$@"
diff --git a/plugins/storage/triggers.go b/plugins/storage/triggers.go
new file mode 100644
index 000000000..ac2c4d4e0
--- /dev/null
+++ b/plugins/storage/triggers.go
@@ -0,0 +1,93 @@
+package storage
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"runtime"
+
+	"github.com/dokku/dokku/plugins/common"
+)
+
+// TriggerInstall sets up the storage plugin on installation
+func TriggerInstall() error {
+	storageDir := GetStorageDirectory()
+
+	if err := os.MkdirAll(storageDir, 0755); err != nil {
+		return fmt.Errorf("Unable to create storage directory: %s", err.Error())
+	}
+
+	if err := common.SetPermissions(common.SetPermissionInput{
+		Filename: storageDir,
+		Mode:     0755,
+	}); err != nil {
+		return fmt.Errorf("Unable to set storage directory permissions: %s", err.Error())
+	}
+
+	distro := detectDistro()
+	if distro == "" {
+		return nil
+	}
+
+	pluginPath := common.MustGetEnv("PLUGIN_AVAILABLE_PATH")
+	chownScript := filepath.Join(pluginPath, "storage", "bin", "chown-storage-dir")
+
+	sudoersFile := "/etc/sudoers.d/dokku-storage"
+	content := fmt.Sprintf("%%dokku ALL=(ALL) NOPASSWD:%s *\n", chownScript)
+	content += "Defaults env_keep += \"DOKKU_LIB_ROOT\"\n"
+
+	if err := os.WriteFile(sudoersFile, []byte(content), 0440); err != nil {
+		return fmt.Errorf("Unable to write sudoers file: %s", err.Error())
+	}
+
+	return nil
+}
+
+// detectDistro returns the Linux distribution name
+func detectDistro() string {
+	if runtime.GOOS != "linux" {
+		return ""
+	}
+
+	distro := os.Getenv("DOKKU_DISTRO")
+	if distro != "" {
+		return distro
+	}
+
+	if common.FileExists("/etc/debian_version") {
+		return "debian"
+	}
+	if common.FileExists("/etc/arch-release") {
+		return "arch"
+	}
+
+	return ""
+}
+
+// TriggerStorageList outputs storage mounts for an app
+func TriggerStorageList(appName string, phase string, format string) error {
+	mounts, err := GetBindMounts(appName, phase)
+	if err != nil {
+		return err
+	}
+
+	if format == "json" {
+		entries := []StorageListEntry{}
+		for _, mount := range mounts {
+			entries = append(entries, ParseMountPath(mount))
+		}
+
+		output, err := json.Marshal(entries)
+		if err != nil {
+			return err
+		}
+		fmt.Println(string(output))
+	} else {
+		for _, mount := range mounts {
+			fmt.Println(mount)
+		}
+	}
+
+	return nil
+}

From dd70fb823d27b889247cd7f43ce2d8d0c45c61d2 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 02:19:22 -0500
Subject: [PATCH 346/427] feat: add the ability to skip setting the
 deploy-branch when running git:sync

Closes #8212
---
 docs/deployment/methods/git.md |   8 ++-
 plugins/git/help-functions     |   2 +-
 plugins/git/internal-functions |  19 ++++--
 tests/unit/git_3.bats          | 102 +++++++++++++++++++++++++++++++++
 4 files changed, 124 insertions(+), 7 deletions(-)

diff --git a/docs/deployment/methods/git.md b/docs/deployment/methods/git.md
index eb46b3261..b27371a07 100644
--- a/docs/deployment/methods/git.md
+++ b/docs/deployment/methods/git.md
@@ -10,7 +10,7 @@ git:from-archive [--archive-type ARCHIVE_TYPE] <app> <archive-url> [<git-usernam
 git:from-image [--build-dir DIRECTORY] <app> <docker-image> [<git-username> <git-email>] # Updates an app's git repository with a given docker image
 git:generate-deploy-key                           # Generates a deploy ssh key
 git:load-image [--build-dir DIRECTORY] <app> <docker-image> [<git-username> <git-email>] # Updates an app's git repository with a docker image loaded from stdin
-git:sync [--build|build-if-changes] <app> <repository> [<git-ref>] # Clone or fetch an app from remote git repo
+git:sync [--build|--build-if-changes] [--skip-deploy-branch] <app> <repository> [<git-ref>] # Clone or fetch an app from remote git repo
 git:initialize <app>                              # Initialize a git repository for an app
 git:public-key                                    # Outputs the dokku public deploy key
 git:report [<app>] [<flag>]                       # Displays a git report for one or more apps
@@ -163,6 +163,12 @@ When running `git:sync` without a reference, it may be useful to only build when
 dokku git:sync --build-if-changes node-js-app https://github.com/heroku/node-js-getting-started.git
 ```
 
+By default, when running `git:sync` with a git branch reference, Dokku will automatically set the `deploy-branch` property to the specified branch. To skip setting the deploy branch, specify the `--skip-deploy-branch` flag.
+
+```shell
+dokku git:sync --skip-deploy-branch node-js-app https://github.com/heroku/node-js-getting-started.git main
+```
+
 ### Initializing from private repositories
 
 > [!IMPORTANT]
diff --git a/plugins/git/help-functions b/plugins/git/help-functions
index c0fd67da8..34d116c51 100755
--- a/plugins/git/help-functions
+++ b/plugins/git/help-functions
@@ -32,7 +32,7 @@ fn-help-content() {
     git:from-archive <app> <archive-url> [<git-username> <git-email>], Updates an app's git repository with a given archive file
     git:from-image <app> <docker-image> [<git-username> <git-email>], Updates an app's git repository with a given docker image
     git:load-image <app> <docker-image> [<git-username> <git-email>], Updates an app's git repository with a docker image loaded from stdin
-    git:sync [--build] <app> <repository> [<git-ref>], Clone or fetch an app from remote git repo
+    git:sync [--build|--build-if-changes] [--skip-deploy-branch] <app> <repository> [<git-ref>], Clone or fetch an app from remote git repo
     git:initialize <app>, Initialize a git repository for an app
     git:generate-deploy-key, Generates a deploy ssh key
     git:public-key, Outputs the dokku public deploy key
diff --git a/plugins/git/internal-functions b/plugins/git/internal-functions
index 5641cd923..585c899f2 100755
--- a/plugins/git/internal-functions
+++ b/plugins/git/internal-functions
@@ -179,7 +179,7 @@ cmd-git-sync() {
   local cmd="git:sync"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP GIT_REMOTE GIT_REF FLAG
-  local CURRENT_REF DOKKU_DEPLOY_BRANCH SHOULD_BUILD UPDATED_REF
+  local CURRENT_REF DOKKU_DEPLOY_BRANCH SHOULD_BUILD SKIP_DEPLOY_BRANCH UPDATED_REF
 
   ARGS=()
   for arg in "$@"; do
@@ -193,6 +193,11 @@ cmd-git-sync() {
       continue
     fi
 
+    if [[ "$arg" == "--skip-deploy-branch" ]]; then
+      SKIP_DEPLOY_BRANCH="true"
+      continue
+    fi
+
     ARGS+=("$arg")
   done
 
@@ -213,7 +218,7 @@ cmd-git-sync() {
 
   if ! fn-git-cmd "$APP_ROOT" rev-parse "$DOKKU_DEPLOY_BRANCH" &>/dev/null; then
     dokku_log_info1_quiet "Cloning $APP from $GIT_REMOTE#$GIT_REF"
-    fn-git-clone "$APP" "$GIT_REMOTE" "$GIT_REF"
+    fn-git-clone "$APP" "$GIT_REMOTE" "$GIT_REF" "$SKIP_DEPLOY_BRANCH"
   else
     dokku_log_verbose "Fetching remote code for $APP from $GIT_REMOTE#$GIT_REF"
     fn-git-fetch "$APP" "$GIT_REMOTE" "$GIT_REF"
@@ -373,7 +378,7 @@ EOF
 
 fn-git-clone() {
   declare desc="creates an app from remote git repo"
-  declare APP="$1" GIT_REMOTE="$2" GIT_REF="$3"
+  declare APP="$1" GIT_REMOTE="$2" GIT_REF="$3" SKIP_DEPLOY_BRANCH="$4"
   local APP_ROOT="$DOKKU_ROOT/$APP"
   [[ -z "$APP" ]] && dokku_log_fail "Please specify an app to run the command on"
 
@@ -404,8 +409,12 @@ fn-git-clone() {
   else
     GIT_TERMINAL_PROMPT=0 suppress_output git clone -n --branch "$GIT_REF" "$GIT_REMOTE" "$TMP_CLONE_DIR"
     if fn-git-cmd "$TMP_CLONE_DIR" show-ref --verify "refs/heads/$GIT_REF" &>/dev/null; then
-      dokku_log_verbose "Detected branch, setting deploy-branch to $GIT_REF"
-      fn-plugin-property-write "git" "$APP" "deploy-branch" "$GIT_REF"
+      if [[ "$SKIP_DEPLOY_BRANCH" != "true" ]]; then
+        dokku_log_verbose "Detected branch, setting deploy-branch to $GIT_REF"
+        fn-plugin-property-write "git" "$APP" "deploy-branch" "$GIT_REF"
+      else
+        dokku_log_verbose "Detected branch $GIT_REF, skipping deploy-branch setting"
+      fi
     fi
   fi
 
diff --git a/tests/unit/git_3.bats b/tests/unit/git_3.bats
index a86b2e09c..8e7119d41 100644
--- a/tests/unit/git_3.bats
+++ b/tests/unit/git_3.bats
@@ -629,3 +629,105 @@ teardown() {
   echo "status: $status"
   assert_success
 }
+
+@test "(git:sync) --skip-deploy-branch" {
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+
+  run /bin/bash -c "dokku git:sync $TEST_APP https://github.com/dokku/smoke-test-app.git another-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Detected branch, setting deploy-branch to another-branch"
+
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "another-branch"
+
+  run destroy_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run create_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+
+  run /bin/bash -c "dokku git:sync --skip-deploy-branch $TEST_APP https://github.com/dokku/smoke-test-app.git another-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "skipping deploy-branch setting"
+
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+}
+
+@test "(git:sync) --build --skip-deploy-branch" {
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+
+  run /bin/bash -c "dokku git:sync --build --skip-deploy-branch $TEST_APP https://github.com/dokku/smoke-test-app.git another-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "skipping deploy-branch setting"
+  assert_output_contains "Application deployed"
+
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+}
+
+@test "(git:sync) --build-if-changes --skip-deploy-branch" {
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+
+  run /bin/bash -c "dokku git:sync --build-if-changes --skip-deploy-branch $TEST_APP https://github.com/dokku/smoke-test-app.git another-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "skipping deploy-branch setting"
+  assert_output_contains "Application deployed"
+
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+
+  run /bin/bash -c "dokku git:sync --build-if-changes --skip-deploy-branch $TEST_APP https://github.com/dokku/smoke-test-app.git another-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Skipping build as no changes were detected"
+
+  run /bin/bash -c "dokku git:report $TEST_APP --git-deploy-branch"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output "master"
+}

From 6c3936802e12065c34b73759ff140aff9f272740 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 02:46:44 -0500
Subject: [PATCH 347/427] feat: add a method to force build when re-using an
 image with git:from-image

Closes #6847
---
 docs/deployment/methods/image.md |  8 +++++++-
 plugins/git/git-from-image       | 11 +++++++++--
 plugins/git/internal-functions   | 11 ++++++++++-
 tests/unit/git_4.bats            | 22 ++++++++++++++++++++++
 4 files changed, 48 insertions(+), 4 deletions(-)

diff --git a/docs/deployment/methods/image.md b/docs/deployment/methods/image.md
index aca831f9b..bc180a9f7 100644
--- a/docs/deployment/methods/image.md
+++ b/docs/deployment/methods/image.md
@@ -17,7 +17,13 @@ In the above example, Dokku will build the app as if the repository contained _o
 FROM my-registry/node-js-getting-started:latest
 ```
 
-If the specified image already exists on the Dokku host, it will not be pulled again, though this behavior may be changed using [build phase docker-options](/docs/advanced-usage/docker-options.md).
+If the specified image already exists on the Dokku host, it will not be pulled again. To force a pull even when the image exists locally, use the `--force` flag:
+
+```shell
+dokku git:from-image --force node-js-app my-registry/node-js-getting-started:latest
+```
+
+This is useful when the remote image has been updated but the tag remains the same.
 
 Triggering a build with the same arguments multiple times will result in Dokku exiting `0` early as there will be no changes detected. If the image tag is reused but the underlying image is different, it is recommended to use the image digest instead of the tag. This can be retrieved via the following command:
 
diff --git a/plugins/git/git-from-image b/plugins/git/git-from-image
index 8977a810a..e5731d2d9 100755
--- a/plugins/git/git-from-image
+++ b/plugins/git/git-from-image
@@ -26,9 +26,16 @@ trigger-git-git-from-image() {
   echo "FROM $DOCKER_IMAGE" >>"$TMP_WORK_DIR/Dockerfile"
   echo "LABEL com.dokku.docker-image-labeler/alternate-tags=[\\\"$DOCKER_IMAGE\\\"]" >>"$TMP_WORK_DIR/Dockerfile"
 
-  if [[ "$(docker images -q "$DOCKER_IMAGE" 2>/dev/null)" == "" ]]; then
+  if [[ "$("$DOCKER_BIN" image ls -q "$DOCKER_IMAGE" 2>/dev/null)" == "" ]]; then
     dokku_log_info1 "Pulling image"
-    "$DOCKER_BIN" image pull "$DOCKER_IMAGE"
+    if ! "$DOCKER_BIN" image pull "$DOCKER_IMAGE"; then
+      dokku_log_fail "Failed to pull image: $DOCKER_IMAGE"
+    fi
+  elif [[ "$DOKKU_APPS_FORCE_DELETE" == "1" ]]; then
+    dokku_log_info1 "Force pulling image"
+    if ! "$DOCKER_BIN" image pull "$DOCKER_IMAGE"; then
+      dokku_log_fail "Failed to pull image: $DOCKER_IMAGE"
+    fi
   else
     dokku_log_info1 "Image exists on host, skipping pull"
   fi
diff --git a/plugins/git/internal-functions b/plugins/git/internal-functions
index 5641cd923..5652725f7 100755
--- a/plugins/git/internal-functions
+++ b/plugins/git/internal-functions
@@ -141,7 +141,7 @@ cmd-git-from-image() {
   local cmd="git:from-image"
   [[ "$1" == "$cmd" ]] && shift 1
   declare APP DOCKER_IMAGE USER_NAME USER_EMAIL
-  local BUILD_DIR
+  local BUILD_DIR FORCE=false
 
   ARGS=()
   skip=false
@@ -151,6 +151,11 @@ cmd-git-from-image() {
       continue
     fi
 
+    if [[ "$arg" == "--force" ]]; then
+      FORCE=true
+      continue
+    fi
+
     if [[ "$skip" == "true" ]]; then
       BUILD_DIR="$arg"
       skip=false
@@ -168,6 +173,10 @@ cmd-git-from-image() {
   verify_app_name "$APP"
   [[ -z "$DOCKER_IMAGE" ]] && dokku_log_fail "Please specify a docker image"
 
+  if [[ "$FORCE" == "true" ]]; then
+    export DOKKU_APPS_FORCE_DELETE=1
+  fi
+
   if ! plugn trigger git-from-image "$APP" "$DOCKER_IMAGE" "$BUILD_DIR" "$USER_NAME" "$USER_EMAIL"; then
     return 1
   fi
diff --git a/tests/unit/git_4.bats b/tests/unit/git_4.bats
index 2d29aec68..3abdc460b 100644
--- a/tests/unit/git_4.bats
+++ b/tests/unit/git_4.bats
@@ -35,6 +35,28 @@ teardown() {
   assert_output "ref: refs/heads/master"
 }
 
+@test "(git) git:from-image --force" {
+  run /bin/bash -c "docker image rm linuxserver/foldingathome:7.6.21 2>/dev/null || true"
+
+  run /bin/bash -c "dokku git:from-image $TEST_APP linuxserver/foldingathome:7.6.21"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Pulling image"
+
+  run /bin/bash -c "dokku git:from-image $TEST_APP linuxserver/foldingathome:7.6.21"
+  echo "output: $output"
+  echo "status: $status"
+  assert_output_contains "Image exists on host, skipping pull"
+  assert_output_contains "No changes detected, skipping git commit"
+
+  run /bin/bash -c "dokku git:from-image --force $TEST_APP linuxserver/foldingathome:7.6.21"
+  echo "output: $output"
+  echo "status: $status"
+  assert_output_contains "Force pulling image"
+  assert_output_contains "No changes detected, skipping git commit"
+}
+
 @test "(git) git:from-image [normal-custom-branch]" {
   run /bin/bash -c "dokku git:set $TEST_APP deploy-branch main"
   echo "output: $output"

From b56dd527272b45bc2917a806f4c0d97917936608 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 10:37:57 -0500
Subject: [PATCH 348/427] chore: fix lint issues

---
 plugins/storage/bin/chown-storage-dir | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/plugins/storage/bin/chown-storage-dir b/plugins/storage/bin/chown-storage-dir
index c5bb21d39..4be58586c 100755
--- a/plugins/storage/bin/chown-storage-dir
+++ b/plugins/storage/bin/chown-storage-dir
@@ -17,8 +17,7 @@ main() {
   fi
 
   case "$CHOWN_ID" in
-    0|1000|2000|32767|165536|166536|167536|198303)
-      ;;
+    0 | 1000 | 2000 | 32767 | 165536 | 166536 | 167536 | 198303) ;;
     *)
       echo " !     Unsupported chown permissions. Supported values: 0, 1000, 2000, 32767 (and user namespace offset variants)" 1>&2
       exit 1

From 00e07f7c8992cab23ab96a6c6beba1c416d8385a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Thu, 8 Jan 2026 11:56:31 -0500
Subject: [PATCH 349/427] fix: correct the report output

---
 plugins/storage/report.go                     | 37 +++++++++++++++++++
 .../storage/src/subcommands/subcommands.go    | 24 ++++--------
 plugins/storage/subcommands.go                | 36 ++++--------------
 3 files changed, 51 insertions(+), 46 deletions(-)
 create mode 100644 plugins/storage/report.go

diff --git a/plugins/storage/report.go b/plugins/storage/report.go
new file mode 100644
index 000000000..d932422e0
--- /dev/null
+++ b/plugins/storage/report.go
@@ -0,0 +1,37 @@
+package storage
+
+import "github.com/dokku/dokku/plugins/common"
+
+func ReportSingleApp(appName string, infoFlag string, format string) error {
+	if err := common.VerifyAppName(appName); err != nil {
+		return err
+	}
+
+	flags := map[string]common.ReportFunc{
+		"--storage-build-mounts":  reportBuildMounts,
+		"--storage-deploy-mounts": reportDeployMounts,
+		"--storage-run-mounts":    reportRunMounts,
+	}
+
+	flagKeys := []string{}
+	for flagKey := range flags {
+		flagKeys = append(flagKeys, flagKey)
+	}
+
+	trimPrefix := false
+	uppercaseFirstCharacter := true
+	infoFlags := common.CollectReport(appName, infoFlag, flags)
+	return common.ReportSingleApp("storage", appName, infoFlag, infoFlags, flagKeys, format, trimPrefix, uppercaseFirstCharacter)
+}
+
+func reportBuildMounts(appName string) string {
+	return GetBindMountsForDisplay(appName, "build")
+}
+
+func reportDeployMounts(appName string) string {
+	return GetBindMountsForDisplay(appName, "deploy")
+}
+
+func reportRunMounts(appName string) string {
+	return GetBindMountsForDisplay(appName, "run")
+}
diff --git a/plugins/storage/src/subcommands/subcommands.go b/plugins/storage/src/subcommands/subcommands.go
index ef13038d8..1939564a6 100644
--- a/plugins/storage/src/subcommands/subcommands.go
+++ b/plugins/storage/src/subcommands/subcommands.go
@@ -38,23 +38,13 @@ func main() {
 		mountPath := args.Arg(1)
 		err = storage.CommandMount(appName, mountPath)
 	case "report":
-		args := flag.NewFlagSet("storage:report", flag.ExitOnError)
-		format := args.String("format", "stdout", "--format: output format (stdout, json)")
-		args.Parse(os.Args[2:])
-
-		osArgs, infoFlag, parseErr := common.ParseReportArgs("storage", args.Args())
-		if parseErr != nil {
-			err = parseErr
-		} else {
-			appName := ""
-			if len(osArgs) > 0 {
-				appName = osArgs[0]
-			}
-			if *format == "stdout" {
-				err = storage.CommandReport(appName, infoFlag)
-			} else {
-				err = storage.CommandReportSingleApp(appName, infoFlag, *format)
-			}
+		args := flag.NewFlagSet("scheduler-k3s:report", flag.ExitOnError)
+		format := args.String("format", "stdout", "format: [ stdout | json ]")
+		osArgs, infoFlag, flagErr := common.ParseReportArgs("scheduler-k3s", os.Args[2:])
+		if flagErr == nil {
+			args.Parse(osArgs)
+			appName := args.Arg(0)
+			err = storage.CommandReport(appName, *format, infoFlag)
 		}
 	case "unmount":
 		args := flag.NewFlagSet("storage:unmount", flag.ExitOnError)
diff --git a/plugins/storage/subcommands.go b/plugins/storage/subcommands.go
index d54c24bf5..4ff579a65 100644
--- a/plugins/storage/subcommands.go
+++ b/plugins/storage/subcommands.go
@@ -197,45 +197,23 @@ func CommandList(appName string, format string) error {
 }
 
 // CommandReport displays a storage report for one or more apps
-func CommandReport(appName string, infoFlag string) error {
+func CommandReport(appName string, format string, infoFlag string) error {
 	if appName == "" {
 		apps, err := common.DokkuApps()
 		if err != nil {
+			if errors.Is(err, common.NoAppsExist) {
+				common.LogWarn(err.Error())
+				return nil
+			}
 			return err
 		}
-
 		for _, app := range apps {
-			if err := reportSingle(app, infoFlag, "stdout"); err != nil {
+			if err := ReportSingleApp(app, format, infoFlag); err != nil {
 				return err
 			}
 		}
 		return nil
 	}
 
-	return reportSingle(appName, infoFlag, "stdout")
-}
-
-// CommandReportSingleApp displays a storage report for a single app with format support
-func CommandReportSingleApp(appName string, infoFlag string, format string) error {
-	return reportSingle(appName, infoFlag, format)
-}
-
-func reportSingle(appName string, infoFlag string, format string) error {
-	if err := common.VerifyAppName(appName); err != nil {
-		return err
-	}
-
-	infoFlags := map[string]string{
-		"--storage-build-mounts":  GetBindMountsForDisplay(appName, "build"),
-		"--storage-deploy-mounts": GetBindMountsForDisplay(appName, "deploy"),
-		"--storage-run-mounts":    GetBindMountsForDisplay(appName, "run"),
-	}
-
-	infoFlagKeys := []string{
-		"--storage-build-mounts",
-		"--storage-deploy-mounts",
-		"--storage-run-mounts",
-	}
-
-	return common.ReportSingleApp("storage", appName, infoFlag, infoFlags, infoFlagKeys, format, true, true)
+	return ReportSingleApp(appName, format, infoFlag)
 }

From dc5fe1b1ef3ff5576ac507fa633a629e6fb5a8e2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 Jan 2026 00:59:27 +0000
Subject: [PATCH 350/427] chore(deps): bump werkzeug in
 /tests/apps/python-flask

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.1.4...3.1.5)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-version: 3.1.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index db38980e6..d11d00f57 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
-Werkzeug==3.1.4
+Werkzeug==3.1.5
 gunicorn==23.0.0
 

From 6a83fd053c28680343b7f455a2b4762001d3ffba Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 9 Jan 2026 00:12:16 -0500
Subject: [PATCH 351/427] feat: add the ability to log into a registry on a
 per-app basis

Closes #5324
---
 docs/advanced-usage/registry-management.md    | 62 ++++++++++---
 plugins/builder-dockerfile/builder-build      |  3 +
 plugins/builder-dockerfile/builder-release    |  3 +
 plugins/builder-herokuish/builder-build       |  4 +
 plugins/builder-herokuish/builder-release     |  4 +
 plugins/builder-herokuish/pre-build           |  3 +
 plugins/builder-lambda/builder-build          |  3 +
 plugins/builder-lambda/builder-release        |  3 +
 plugins/builder-nixpacks/builder-build        |  5 +-
 plugins/builder-nixpacks/builder-release      |  3 +
 plugins/builder-pack/builder-build            |  3 +
 plugins/builder-railpack/builder-build        |  5 +-
 plugins/builder-railpack/builder-release      |  4 +-
 plugins/common/functions                      | 11 +++
 plugins/git/git-from-image                    |  4 +
 plugins/registry/Makefile                     |  4 +-
 plugins/registry/functions.go                 | 58 ++++++++++--
 plugins/registry/src/commands/commands.go     |  5 +-
 .../registry/src/subcommands/subcommands.go   | 63 ++++++++++++-
 plugins/registry/src/triggers/triggers.go     |  3 +
 plugins/registry/subcommands.go               | 54 ++++++++++-
 plugins/registry/triggers.go                  | 30 +++++++
 tests/unit/registry.bats                      | 90 ++++++++++++++++++-
 23 files changed, 398 insertions(+), 29 deletions(-)

diff --git a/docs/advanced-usage/registry-management.md b/docs/advanced-usage/registry-management.md
index 8e2eef8f6..8f33ee319 100644
--- a/docs/advanced-usage/registry-management.md
+++ b/docs/advanced-usage/registry-management.md
@@ -4,9 +4,10 @@
 > New as of 0.25.0
 
 ```
-registry:login [--password-stdin] <server> <username> [<password>] # Login to a docker registry
-registry:report [<app>] [<flag>]                                   # Displays a registry report for one or more apps
-registry:set <app> <key> (<value>)                                 # Set or clear a registry property for an app
+registry:login [--global|--password-stdin] [<app>] <server> <username> [<password>] # Login to a docker registry
+registry:logout [--global] [<app>] <server>                                         # Logout from a docker registry
+registry:report [<app>] [<flag>]                                                    # Displays a registry report for one or more apps
+registry:set <app>|--global <key> (<value>)                                         # Set or clear a registry property for an app
 ```
 
 The registry plugin enables interacting with remote registries, which is useful when either deploying images via `git:from-image` or when interacting with custom schedulers to deploy built image artifacts.
@@ -15,34 +16,75 @@ The registry plugin enables interacting with remote registries, which is useful
 
 ### Logging into a registry
 
-The `registry:login` command can be used to log into a docker registry. The following are examples for logging into various common registries:
+The `registry:login` command can be used to log into a docker registry. Credentials can be stored globally (for all apps) or on a per-app basis.
+
+#### Global login
+
+To log in globally (credentials shared by all apps), use the `--global` flag:
 
 ```shell
 # hub.docker.com
-dokku registry:login docker.io $USERNAME $PASSWORD
+dokku registry:login --global docker.io $USERNAME $PASSWORD
 
 # digitalocean
 # the username and password are both defined as the same api token
-dokku registry:login registry.digitalocean.com $DIGITALOCEAN_API_TOKEN $DIGITALOCEAN_API_TOKEN
+dokku registry:login --global registry.digitalocean.com $DIGITALOCEAN_API_TOKEN $DIGITALOCEAN_API_TOKEN
 
 # github container registry
 # see the following link for information on retrieving a personal access token
 #   https://docs.github.com/en/packages/guides/pushing-and-pulling-docker-images#authenticating-to-github-container-registry
-dokku registry:login ghcr.io $USERNAME $REGISTRY_PAT_TOKEN
+dokku registry:login --global ghcr.io $USERNAME $REGISTRY_PAT_TOKEN
 
 # quay
 # a robot user may be used to login
-dokku registry:login quay.io $USERNAME $PASSWORD
+dokku registry:login --global quay.io $USERNAME $PASSWORD
 ```
 
-For security reasons, the password may also be specified as stdin by specifying the `--password-stdin` flag. This is supported regardless of the registry being logged into.
+> [!NOTE]
+> For backwards compatibility, if the `--global` flag is omitted and only three arguments are provided (server, username, password), the command will behave as a global login but will show a deprecation warning.
+
+#### Per-app login
+
+To log in for a specific app, specify the app name as the first argument:
 
 ```shell
-echo "$PASSWORD" | dokku registry:login --password-stdin docker.io $USERNAME
+# log into docker.io for a specific app
+dokku registry:login node-js-app docker.io $USERNAME $PASSWORD
+
+# log into ghcr.io for a specific app
+dokku registry:login node-js-app ghcr.io $USERNAME $REGISTRY_PAT_TOKEN
+```
+
+Per-app credentials are stored in `/var/lib/dokku/config/registry/$APP/config.json` and are automatically used for docker operations (build, push, pull) for that specific app.
+
+#### Password via stdin
+
+For security reasons, the password may also be specified as stdin by specifying the `--password-stdin` flag. This is supported for both global and per-app logins:
+
+```shell
+# global login via stdin
+echo "$PASSWORD" | dokku registry:login --global --password-stdin docker.io $USERNAME
+
+# per-app login via stdin
+echo "$PASSWORD" | dokku registry:login node-js-app --password-stdin docker.io $USERNAME
 ```
 
 For certain Docker registries - such as Amazon ECR or Google's GCR registries - users may instead wish to use a docker credential helper to automatically authenticate against a server; please see the documentation regarding the credential helper in question for further setup instructions.
 
+### Logging out from a registry
+
+The `registry:logout` command can be used to log out from a docker registry:
+
+```shell
+# global logout
+dokku registry:logout --global docker.io
+
+# per-app logout
+dokku registry:logout node-js-app docker.io
+```
+
+When an app is destroyed, any per-app registry credentials are automatically removed.
+
 ### Setting a remote server
 
 To specify a remote server registry for pushes, set the `server` property via the `registry:set` command. The default value for this property is empty string. Setting the value to `docker.io` or `hub.docker.com` will result in the computed value being empty string (as that is the default, implicit registry), while any non-zero length value will have a `/` appended to it if there is not one already.
diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 1fc87e7ab..d15ef8fbe 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -246,6 +246,9 @@ trigger-builder-dockerfile-builder-build() {
   done
 
   eval "$(config_export app "$APP")"
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${DOCKERFILE_ARGS[@]}" --tag $IMAGE .
 
   plugn trigger ports-set-detected "$APP" "$(fn-builder-dockerfile-get-detect-port-map "$APP" "$IMAGE" "$SOURCECODE_WORK_DIR/Dockerfile")"
diff --git a/plugins/builder-dockerfile/builder-release b/plugins/builder-dockerfile/builder-release
index b7023d27e..a9a331bd6 100755
--- a/plugins/builder-dockerfile/builder-release
+++ b/plugins/builder-dockerfile/builder-release
@@ -29,6 +29,9 @@ trigger-builder-dockerfile-builder-release() {
     DOCKER_BUILD_ARGS+=("--platform=linux/amd64")
   fi
 
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-dockerfile/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/plugins/builder-herokuish/builder-build b/plugins/builder-herokuish/builder-build
index f8a396512..d24960dc8 100755
--- a/plugins/builder-herokuish/builder-build
+++ b/plugins/builder-herokuish/builder-build
@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 set -eo pipefail
 [[ $DOKKU_TRACE ]] && set -x
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
 source "$PLUGIN_AVAILABLE_PATH/config/functions"
 
 fn-builder-herokuish-ensure-cache() {
@@ -46,6 +47,9 @@ trigger-builder-herokuish-builder-build() {
   [[ -n "$NEW_DOKKU_IMAGE" ]] && DOKKU_IMAGE="$NEW_DOKKU_IMAGE"
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=herokuish" "--label=com.dokku.app-name=$APP" "--label=dokku")
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/copy-source.Dockerfile" --build-arg APP_IMAGE="$DOKKU_IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" --build-arg "TRACE=$DOKKU_TRACE" -t $IMAGE "$SOURCECODE_WORK_DIR"; then
diff --git a/plugins/builder-herokuish/builder-release b/plugins/builder-herokuish/builder-release
index f0a72f890..73df6ce7b 100755
--- a/plugins/builder-herokuish/builder-release
+++ b/plugins/builder-herokuish/builder-release
@@ -30,6 +30,10 @@ trigger-builder-herokuish-builder-release() {
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
 
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
+
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/builder-pre-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting environment variables"
     return 1
diff --git a/plugins/builder-herokuish/pre-build b/plugins/builder-herokuish/pre-build
index 35bd1bb9e..dc1453e96 100755
--- a/plugins/builder-herokuish/pre-build
+++ b/plugins/builder-herokuish/pre-build
@@ -41,6 +41,9 @@ trigger-builder-herokuish-pre-build-buildpack() {
 
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/pre-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" -t $IMAGE "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting BUILD_ENV into build environment"
     return 1
diff --git a/plugins/builder-lambda/builder-build b/plugins/builder-lambda/builder-build
index c843135a1..d085a374e 100755
--- a/plugins/builder-lambda/builder-build
+++ b/plugins/builder-lambda/builder-build
@@ -24,6 +24,9 @@ trigger-builder-lambda-builder-build() {
   fi
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   lambda-builder build --generate-image --write-procfile --image-env=DOCKER_LAMBDA_STAY_OPEN=1 --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=lambda "--label=com.dokku.app-name=$APP" $DOKKU_GLOBAL_BUILD_ARGS --port 5000 --tag "$IMAGE" --working-directory "$SOURCECODE_WORK_DIR"
   if [[ ! -f "$SOURCECODE_WORK_DIR/lambda.zip" ]]; then
     dokku_log_warn "Compressed lambda.zip not detected, failed to build lambda function"
diff --git a/plugins/builder-lambda/builder-release b/plugins/builder-lambda/builder-release
index fcfe701bb..ad3ebf32b 100755
--- a/plugins/builder-lambda/builder-release
+++ b/plugins/builder-lambda/builder-release
@@ -23,6 +23,9 @@ trigger-builder-lambda-builder-release() {
   trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=lambda" "--label=com.dokku.app-name=$APP" "--label=dokku")
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-lambda/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index 8509c2a29..dd2b41871 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -243,7 +243,10 @@ trigger-builder-nixpacks-builder-build() {
 
   eval "$(config_export app "$APP" --merged)"
 
-  # shellcheck disable=SC2086
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
+
   if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
diff --git a/plugins/builder-nixpacks/builder-release b/plugins/builder-nixpacks/builder-release
index ca75d124f..bf90016c7 100755
--- a/plugins/builder-nixpacks/builder-release
+++ b/plugins/builder-nixpacks/builder-release
@@ -19,6 +19,9 @@ trigger-builder-nixpacks-builder-release() {
   trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=nixpacks" "--label=com.dokku.app-name=$APP" "--label=dokku")
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-nixpacks/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 7457b51d7..0041e0d23 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -293,6 +293,9 @@ trigger-builder-pack-builder-build() {
     done <"$SOURCECODE_WORK_DIR/.buildpacks"
   fi
 
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   pack build "$IMAGE" --builder "$DOKKU_CNB_BUILDER" --path "$SOURCECODE_WORK_DIR" --default-process web "${PACK_ARGS[@]}" "${ENV_ARGS[@]}"
   docker-image-labeler relabel --label=dokku --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=pack --label=com.dokku.app-name=$APP "$IMAGE"
 
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 1cfdd4322..092b02be8 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -125,7 +125,10 @@ trigger-builder-railpack-builder-build() {
 
   eval "$(config_export app "$APP" --merged)"
 
-  # shellcheck disable=SC2086
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
+
   if ! railpack build "${RAILPACK_ARGS[@]}" --name "$IMAGE-build" "$SOURCECODE_WORK_DIR"; then
     dokku_log_warn "Failure building image"
     return 1
diff --git a/plugins/builder-railpack/builder-release b/plugins/builder-railpack/builder-release
index dbaa730f5..aca762295 100755
--- a/plugins/builder-railpack/builder-release
+++ b/plugins/builder-railpack/builder-release
@@ -19,7 +19,9 @@ trigger-builder-railpack-builder-release() {
   trap "rm -rf '$TMP_WORK_DIR' >/dev/null" RETURN INT TERM EXIT
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP" "--label=dokku")
-
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
     return 1
diff --git a/plugins/common/functions b/plugins/common/functions
index 9a7e12c84..2bf73f328 100755
--- a/plugins/common/functions
+++ b/plugins/common/functions
@@ -947,3 +947,14 @@ fn-migrate-config-to-property() {
     fi
   done
 }
+
+fn-registry-docker-config() {
+  declare desc="returns docker config file path if per-app registry credentials exist"
+  declare APP="$1"
+  local config_dir="/var/lib/dokku/config/registry/$APP"
+  local config_file="$config_dir/config.json"
+
+  if [[ -f "$config_file" ]] && [[ "$(jq -r '.auths | length' "$config_file" 2>/dev/null)" != "0" ]]; then
+    echo "$config_file"
+  fi
+}
diff --git a/plugins/git/git-from-image b/plugins/git/git-from-image
index e5731d2d9..9540dddac 100755
--- a/plugins/git/git-from-image
+++ b/plugins/git/git-from-image
@@ -26,6 +26,10 @@ trigger-git-git-from-image() {
   echo "FROM $DOCKER_IMAGE" >>"$TMP_WORK_DIR/Dockerfile"
   echo "LABEL com.dokku.docker-image-labeler/alternate-tags=[\\\"$DOCKER_IMAGE\\\"]" >>"$TMP_WORK_DIR/Dockerfile"
 
+  local DOCKER_CONFIG
+  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
+
   if [[ "$("$DOCKER_BIN" image ls -q "$DOCKER_IMAGE" 2>/dev/null)" == "" ]]; then
     dokku_log_info1 "Pulling image"
     if ! "$DOCKER_BIN" image pull "$DOCKER_IMAGE"; then
diff --git a/plugins/registry/Makefile b/plugins/registry/Makefile
index dc8ac2e7f..82ab1be61 100644
--- a/plugins/registry/Makefile
+++ b/plugins/registry/Makefile
@@ -1,5 +1,5 @@
-SUBCOMMANDS = subcommands/login subcommands/report subcommands/set
-TRIGGERS = triggers/deployed-app-image-repo triggers/deployed-app-image-tag triggers/deployed-app-repository triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-delete triggers/post-release-builder triggers/report
+SUBCOMMANDS = subcommands/login subcommands/logout subcommands/report subcommands/set
+TRIGGERS = triggers/deployed-app-image-repo triggers/deployed-app-image-tag triggers/deployed-app-repository triggers/install triggers/post-app-clone-setup triggers/post-app-rename-setup triggers/post-create triggers/post-delete triggers/post-release-builder triggers/report
 BUILD = commands subcommands triggers
 PLUGIN_NAME = registry
 
diff --git a/plugins/registry/functions.go b/plugins/registry/functions.go
index eb85e060b..4c421d75d 100644
--- a/plugins/registry/functions.go
+++ b/plugins/registry/functions.go
@@ -2,7 +2,10 @@ package registry
 
 import (
 	"bytes"
+	"encoding/json"
 	"fmt"
+	"os"
+	"path/filepath"
 	"strconv"
 	"strings"
 	"text/template"
@@ -10,6 +13,47 @@ import (
 	"github.com/dokku/dokku/plugins/common"
 )
 
+const registryConfigDir = "/var/lib/dokku/config/registry"
+
+// GetAppRegistryConfigDir returns the per-app registry config directory
+func GetAppRegistryConfigDir(appName string) string {
+	return filepath.Join(registryConfigDir, appName)
+}
+
+// GetAppRegistryConfigPath returns the path to per-app docker config.json
+func GetAppRegistryConfigPath(appName string) string {
+	return filepath.Join(GetAppRegistryConfigDir(appName), "config.json")
+}
+
+// HasAppRegistryAuth checks if an app has registry credentials configured
+func HasAppRegistryAuth(appName string) bool {
+	configPath := GetAppRegistryConfigPath(appName)
+	if !common.FileExists(configPath) {
+		return false
+	}
+
+	content, err := os.ReadFile(configPath)
+	if err != nil {
+		return false
+	}
+
+	var config map[string]interface{}
+	if err := json.Unmarshal(content, &config); err != nil {
+		return false
+	}
+
+	auths, ok := config["auths"].(map[string]interface{})
+	return ok && len(auths) > 0
+}
+
+// GetDockerConfigArgs returns docker --config arguments if per-app config exists
+func GetDockerConfigArgs(appName string) []string {
+	if appName == "" || !HasAppRegistryAuth(appName) {
+		return []string{}
+	}
+	return []string{"--config", GetAppRegistryConfigDir(appName)}
+}
+
 func getImageRepoFromTemplate(appName string) (string, error) {
 	imageRepoTemplate := common.PropertyGet("registry", "--global", "image-repo-template")
 	if imageRepoTemplate == "" {
@@ -119,14 +163,14 @@ func pushToRegistry(appName string, tag int, imageID string, imageRepo string) e
 				}
 			}()
 			common.LogVerboseQuiet(fmt.Sprintf("Pushing %s", extraTagImage))
-			if err := dockerPush(extraTagImage); err != nil {
+			if err := dockerPush(appName, extraTagImage); err != nil {
 				return fmt.Errorf("unable to push image with %s tag: %w", extraTag, err)
 			}
 		}
 	}
 
 	common.LogVerboseQuiet(fmt.Sprintf("Pushing %s", fullImage))
-	if err := dockerPush(fullImage); err != nil {
+	if err := dockerPush(appName, fullImage); err != nil {
 		return fmt.Errorf("unable to push image %s: %w", fullImage, err)
 	}
 
@@ -159,17 +203,19 @@ func dockerTag(imageID string, imageTag string) error {
 	return nil
 }
 
-func dockerPush(imageTag string) error {
+func dockerPush(appName string, imageTag string) error {
+	args := GetDockerConfigArgs(appName)
+	args = append(args, "image", "push", imageTag)
 	result, err := common.CallExecCommand(common.ExecCommandInput{
 		Command:     common.DockerBin(),
-		Args:        []string{"image", "push", imageTag},
+		Args:        args,
 		StreamStdio: true,
 	})
 	if err != nil {
-		return fmt.Errorf("docker push command failed: %w", err)
+		return fmt.Errorf("docker image push command failed: %w", err)
 	}
 	if result.ExitCode != 0 {
-		return fmt.Errorf("docker push command exited with code %d: %s", result.ExitCode, result.Stderr)
+		return fmt.Errorf("docker image push command exited with code %d: %s", result.ExitCode, result.Stderr)
 	}
 	return nil
 }
diff --git a/plugins/registry/src/commands/commands.go b/plugins/registry/src/commands/commands.go
index d665f17b9..247acee0a 100644
--- a/plugins/registry/src/commands/commands.go
+++ b/plugins/registry/src/commands/commands.go
@@ -18,9 +18,10 @@ Manage registry settings for an app
 Additional commands:`
 
 	helpContent = `
-    registry:login [--password-stdin] <server> <username> [<password>], Login to a docker registry
+    registry:login [--global|--password-stdin] [<app>] <server> <username> [<password>], Login to a docker registry
+    registry:logout [--global] [<app>] <server>, Logout from a docker registry
     registry:report [<app>] [<flag>], Displays a registry report for one or more apps
-    registry:set <app> <property> (<value>), Set or clear a registry property for an app`
+    registry:set <app>|--global <property> (<value>), Set or clear a registry property for an app`
 )
 
 func main() {
diff --git a/plugins/registry/src/subcommands/subcommands.go b/plugins/registry/src/subcommands/subcommands.go
index 0ed00197b..35377be84 100644
--- a/plugins/registry/src/subcommands/subcommands.go
+++ b/plugins/registry/src/subcommands/subcommands.go
@@ -21,11 +21,66 @@ func main() {
 	case "login":
 		args := flag.NewFlagSet("registry:login", flag.ExitOnError)
 		passwordStdin := args.Bool("password-stdin", false, "--password-stdin: read password from stdin")
+		global := args.Bool("global", false, "--global: login globally instead of per-app")
 		args.Parse(os.Args[2:])
-		server := args.Arg(0)
-		username := args.Arg(1)
-		password := args.Arg(2)
-		err = registry.CommandLogin(server, username, password, *passwordStdin)
+
+		argCount := args.NArg()
+		var appName, server, username, password string
+
+		// When --password-stdin is used, password is not in args
+		// Global login: 2 args (server, username) with --password-stdin, 3 args without
+		// Per-app login: 3 args (app, server, username) with --password-stdin, 4 args without
+		globalArgCount := 3
+		perAppArgCount := 4
+		if *passwordStdin {
+			globalArgCount = 2
+			perAppArgCount = 3
+		}
+
+		if *global {
+			// --global: server, username, [password]
+			server = args.Arg(0)
+			username = args.Arg(1)
+			if !*passwordStdin {
+				password = args.Arg(2)
+			}
+		} else if argCount == globalArgCount {
+			// global login without --global flag: warn and treat as global
+			common.LogWarn("Deprecated: please use --global flag for global registry login")
+			server = args.Arg(0)
+			username = args.Arg(1)
+			if !*passwordStdin {
+				password = args.Arg(2)
+			}
+		} else if argCount >= perAppArgCount {
+			// per-app login: app, server, username, [password]
+			appName = args.Arg(0)
+			server = args.Arg(1)
+			username = args.Arg(2)
+			if !*passwordStdin {
+				password = args.Arg(3)
+			}
+		}
+
+		err = registry.CommandLogin(appName, server, username, password, *passwordStdin)
+	case "logout":
+		args := flag.NewFlagSet("registry:logout", flag.ExitOnError)
+		global := args.Bool("global", false, "--global: logout globally instead of per-app")
+		args.Parse(os.Args[2:])
+
+		var appName, server string
+		if *global {
+			server = args.Arg(0)
+		} else if args.NArg() == 1 {
+			// 1 arg: global logout (backwards compatible)
+			server = args.Arg(0)
+		} else {
+			// 2 args: app, server
+			appName = args.Arg(0)
+			server = args.Arg(1)
+		}
+
+		err = registry.CommandLogout(appName, server)
 	case "report":
 		args := flag.NewFlagSet("registry:report", flag.ExitOnError)
 		format := args.String("format", "stdout", "format: [ stdout | json ]")
diff --git a/plugins/registry/src/triggers/triggers.go b/plugins/registry/src/triggers/triggers.go
index 3571aa15f..f1f64dd87 100644
--- a/plugins/registry/src/triggers/triggers.go
+++ b/plugins/registry/src/triggers/triggers.go
@@ -29,6 +29,9 @@ func main() {
 		err = registry.TriggerDeployedAppRepository(appName)
 	case "install":
 		err = registry.TriggerInstall()
+	case "post-create":
+		appName := flag.Arg(0)
+		err = registry.TriggerPostCreate(appName)
 	case "post-app-clone-setup":
 		oldAppName := flag.Arg(0)
 		newAppName := flag.Arg(1)
diff --git a/plugins/registry/subcommands.go b/plugins/registry/subcommands.go
index eb7e68757..b4bde8b7c 100644
--- a/plugins/registry/subcommands.go
+++ b/plugins/registry/subcommands.go
@@ -12,7 +12,7 @@ import (
 )
 
 // CommandLogin logs a user into the specified server
-func CommandLogin(server string, username string, password string, passwordStdin bool) error {
+func CommandLogin(appName string, server string, username string, password string, passwordStdin bool) error {
 	if passwordStdin {
 		stdin, err := io.ReadAll(os.Stdin)
 		if err != nil {
@@ -39,9 +39,22 @@ func CommandLogin(server string, username string, password string, passwordStdin
 	buffer := bytes.Buffer{}
 	buffer.Write([]byte(password + "\n"))
 
+	env := map[string]string{}
+	if appName != "" {
+		if err := common.VerifyAppName(appName); err != nil {
+			return err
+		}
+		configDir := GetAppRegistryConfigDir(appName)
+		if err := os.MkdirAll(configDir, 0700); err != nil {
+			return fmt.Errorf("Unable to create registry config directory: %w", err)
+		}
+		env["DOCKER_CONFIG"] = GetAppRegistryConfigPath(appName)
+	}
+
 	result, err := common.CallExecCommand(common.ExecCommandInput{
 		Command:     common.DockerBin(),
 		Args:        []string{"login", "--username", username, "--password-stdin", server},
+		Env:         env,
 		Stdin:       &buffer,
 		StreamStdio: true,
 	})
@@ -52,6 +65,7 @@ func CommandLogin(server string, username string, password string, passwordStdin
 		return fmt.Errorf("Unable to run docker login: %s", result.StderrContents())
 	}
 
+	// todo: change the signature of the trigger to include the app name
 	_, err = common.CallPlugnTrigger(common.PlugnTriggerInput{
 		Trigger:     "post-registry-login",
 		Args:        []string{server, username},
@@ -67,6 +81,44 @@ func CommandLogin(server string, username string, password string, passwordStdin
 	return nil
 }
 
+// CommandLogout logs a user out from the specified server
+func CommandLogout(appName string, server string) error {
+	if server == "" {
+		return errors.New("Missing server argument")
+	}
+
+	if server == "hub.docker.com" || server == "docker.com" {
+		server = "docker.io"
+	}
+
+	env := map[string]string{}
+	if appName != "" {
+		if err := common.VerifyAppName(appName); err != nil {
+			return err
+		}
+		configDir := GetAppRegistryConfigDir(appName)
+		if !common.DirectoryExists(configDir) {
+			return fmt.Errorf("No registry credentials found for app %s", appName)
+		}
+		env["DOCKER_CONFIG"] = GetAppRegistryConfigPath(appName)
+	}
+
+	result, err := common.CallExecCommand(common.ExecCommandInput{
+		Command:     common.DockerBin(),
+		Args:        []string{"logout", server},
+		Env:         env,
+		StreamStdio: true,
+	})
+	if err != nil {
+		return fmt.Errorf("Unable to run docker logout: %w", err)
+	}
+	if result.ExitCode != 0 {
+		return fmt.Errorf("Unable to run docker logout: %s", result.StderrContents())
+	}
+
+	return nil
+}
+
 // CommandReport displays a registry report for one or more apps
 func CommandReport(appName string, format string, infoFlag string) error {
 	if len(appName) == 0 {
diff --git a/plugins/registry/triggers.go b/plugins/registry/triggers.go
index 30cc97564..665641185 100644
--- a/plugins/registry/triggers.go
+++ b/plugins/registry/triggers.go
@@ -2,6 +2,7 @@ package registry
 
 import (
 	"fmt"
+	"os"
 	"strings"
 
 	"github.com/dokku/dokku/plugins/common"
@@ -57,6 +58,11 @@ func TriggerInstall() error {
 	return nil
 }
 
+// TriggerPostCreate creates the registry config directory for a new app
+func TriggerPostCreate(appName string) error {
+	return common.PropertySetupApp("registry", appName)
+}
+
 // TriggerPostAppCloneSetup creates new registry files
 func TriggerPostAppCloneSetup(oldAppName string, newAppName string) error {
 	err := common.PropertyClone("registry", oldAppName, newAppName)
@@ -64,6 +70,18 @@ func TriggerPostAppCloneSetup(oldAppName string, newAppName string) error {
 		return err
 	}
 
+	// Clone docker config.json if it exists
+	oldConfigPath := GetAppRegistryConfigPath(oldAppName)
+	if common.FileExists(oldConfigPath) {
+		newConfigDir := GetAppRegistryConfigDir(newAppName)
+		if err := os.MkdirAll(newConfigDir, 0700); err != nil {
+			return fmt.Errorf("Unable to create registry config directory: %w", err)
+		}
+		if err := common.Copy(oldConfigPath, GetAppRegistryConfigPath(newAppName)); err != nil {
+			return fmt.Errorf("Unable to clone registry config: %w", err)
+		}
+	}
+
 	return nil
 }
 
@@ -73,6 +91,18 @@ func TriggerPostAppRenameSetup(oldAppName string, newAppName string) error {
 		return err
 	}
 
+	// Move docker config.json if it exists
+	oldConfigPath := GetAppRegistryConfigPath(oldAppName)
+	if common.FileExists(oldConfigPath) {
+		newConfigDir := GetAppRegistryConfigDir(newAppName)
+		if err := os.MkdirAll(newConfigDir, 0700); err != nil {
+			return fmt.Errorf("Unable to create registry config directory: %w", err)
+		}
+		if err := os.Rename(oldConfigPath, GetAppRegistryConfigPath(newAppName)); err != nil {
+			return fmt.Errorf("Unable to rename registry config: %w", err)
+		}
+	}
+
 	if err := common.PropertyDestroy("registry", oldAppName); err != nil {
 		return err
 	}
diff --git a/tests/unit/registry.bats b/tests/unit/registry.bats
index 321c7bf31..a6dba06bd 100644
--- a/tests/unit/registry.bats
+++ b/tests/unit/registry.bats
@@ -27,7 +27,7 @@ teardown() {
   assert_output "$help_output"
 }
 
-@test "(registry) registry:login" {
+@test "(registry:login) global login with deprecated warning" {
   if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
     skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
   fi
@@ -37,6 +37,7 @@ teardown() {
   echo "status: $status"
   assert_success
   assert_output_contains "Login Succeeded"
+  assert_output_contains "Deprecated: please use --global flag"
 
   run /bin/bash -c "echo $DOCKERHUB_TOKEN | dokku registry:login docker.io --password-stdin $DOCKERHUB_USERNAME"
   echo "output: $output"
@@ -45,6 +46,93 @@ teardown() {
   assert_output_contains "Login Succeeded"
 }
 
+@test "(registry:login) global login with --global flag" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  run /bin/bash -c "dokku registry:login --global docker.io $DOCKERHUB_USERNAME $DOCKERHUB_TOKEN"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Login Succeeded"
+  assert_output_not_contains "Deprecated"
+}
+
+@test "(registry:login) per-app login" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  run /bin/bash -c "dokku registry:login $TEST_APP docker.io $DOCKERHUB_USERNAME $DOCKERHUB_TOKEN"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Login Succeeded"
+
+  run /bin/bash -c "test -f /var/lib/dokku/config/registry/$TEST_APP/config.json"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+}
+
+@test "(registry:logout) per-app logout" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  run /bin/bash -c "dokku registry:login $TEST_APP docker.io $DOCKERHUB_USERNAME $DOCKERHUB_TOKEN"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku registry:logout $TEST_APP docker.io"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+}
+
+@test "(registry:logout) global logout" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  run /bin/bash -c "dokku registry:login --global docker.io $DOCKERHUB_USERNAME $DOCKERHUB_TOKEN"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku registry:logout --global docker.io"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+}
+
+@test "(registry) per-app credentials deleted on app destroy" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  run /bin/bash -c "dokku registry:login $TEST_APP docker.io $DOCKERHUB_USERNAME $DOCKERHUB_TOKEN"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "test -d /var/lib/dokku/config/registry/$TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  destroy_app
+
+  run /bin/bash -c "test -d /var/lib/dokku/config/registry/$TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+
+  create_app
+}
+
 @test "(registry) registry:set server" {
   run /bin/bash -c "dokku registry:set --global server ghcr.io"
   echo "output: $output"

From af1c9165744eb88887baf2254e8527fe5f8dc55f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 Jan 2026 13:59:48 +0000
Subject: [PATCH 352/427] chore(deps): bump github.com/onsi/gomega in
 /plugins/common

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.3 to 1.39.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.3...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/common/go.mod | 2 +-
 plugins/common/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/common/go.mod b/plugins/common/go.mod
index 561c26ba7..3f36c0158 100644
--- a/plugins/common/go.mod
+++ b/plugins/common/go.mod
@@ -7,7 +7,7 @@ require (
 	github.com/fatih/color v1.18.0
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/melbahja/goph v1.4.0
-	github.com/onsi/gomega v1.38.3
+	github.com/onsi/gomega v1.39.0
 	github.com/otiai10/copy v1.14.1
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
diff --git a/plugins/common/go.sum b/plugins/common/go.sum
index 7e02672dd..3df23a76d 100644
--- a/plugins/common/go.sum
+++ b/plugins/common/go.sum
@@ -29,8 +29,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
 github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=

From 1ae431e81bd8f842780f04e02c0b26450362b075 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 9 Jan 2026 19:58:34 -0500
Subject: [PATCH 353/427] chore: bump go modules and run go mod tidy

---
 plugins/app-json/go.sum               | 4 ++--
 plugins/apps/go.sum                   | 4 ++--
 plugins/builder/go.sum                | 4 ++--
 plugins/buildpacks/go.sum             | 4 ++--
 plugins/config/go.mod                 | 2 +-
 plugins/config/go.sum                 | 4 ++--
 plugins/cron/go.sum                   | 4 ++--
 plugins/docker-options/go.sum         | 4 ++--
 plugins/logs/go.sum                   | 4 ++--
 plugins/network/go.sum                | 4 ++--
 plugins/nginx-vhosts/go.sum           | 4 ++--
 plugins/ports/go.sum                  | 4 ++--
 plugins/proxy/go.sum                  | 4 ++--
 plugins/ps/go.sum                     | 4 ++--
 plugins/registry/go.sum               | 4 ++--
 plugins/repo/go.sum                   | 4 ++--
 plugins/resource/go.sum               | 4 ++--
 plugins/scheduler-docker-local/go.sum | 4 ++--
 plugins/scheduler-k3s/go.sum          | 4 ++--
 plugins/scheduler/go.sum              | 4 ++--
 plugins/storage/go.mod                | 2 +-
 plugins/storage/go.sum                | 4 ++--
 22 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/plugins/app-json/go.sum b/plugins/app-json/go.sum
index 18e3c9a56..c1a8e8e3b 100644
--- a/plugins/app-json/go.sum
+++ b/plugins/app-json/go.sum
@@ -22,8 +22,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/apps/go.sum b/plugins/apps/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/apps/go.sum
+++ b/plugins/apps/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/builder/go.sum b/plugins/builder/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/builder/go.sum
+++ b/plugins/builder/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/buildpacks/go.sum b/plugins/buildpacks/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/buildpacks/go.sum
+++ b/plugins/buildpacks/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/config/go.mod b/plugins/config/go.mod
index a4cf02737..8f98d05f2 100644
--- a/plugins/config/go.mod
+++ b/plugins/config/go.mod
@@ -5,7 +5,7 @@ go 1.25.5
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/joho/godotenv v1.2.0
-	github.com/onsi/gomega v1.38.3
+	github.com/onsi/gomega v1.39.0
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
 )
diff --git a/plugins/config/go.sum b/plugins/config/go.sum
index 6786f3d38..f6686f5b0 100644
--- a/plugins/config/go.sum
+++ b/plugins/config/go.sum
@@ -31,8 +31,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
 github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/cron/go.sum b/plugins/cron/go.sum
index 9fae847bd..f8d6c4c22 100644
--- a/plugins/cron/go.sum
+++ b/plugins/cron/go.sum
@@ -30,8 +30,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/docker-options/go.sum b/plugins/docker-options/go.sum
index 66e28823f..b5755d52d 100644
--- a/plugins/docker-options/go.sum
+++ b/plugins/docker-options/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/logs/go.sum b/plugins/logs/go.sum
index bad89b635..bd7e1ce4d 100644
--- a/plugins/logs/go.sum
+++ b/plugins/logs/go.sum
@@ -21,8 +21,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/network/go.sum b/plugins/network/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/network/go.sum
+++ b/plugins/network/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/nginx-vhosts/go.sum b/plugins/nginx-vhosts/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/nginx-vhosts/go.sum
+++ b/plugins/nginx-vhosts/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/ports/go.sum b/plugins/ports/go.sum
index 3d1e722f4..2f466b70c 100644
--- a/plugins/ports/go.sum
+++ b/plugins/ports/go.sum
@@ -21,8 +21,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/proxy/go.sum b/plugins/proxy/go.sum
index 3d1e722f4..2f466b70c 100644
--- a/plugins/proxy/go.sum
+++ b/plugins/proxy/go.sum
@@ -21,8 +21,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/ps/go.sum b/plugins/ps/go.sum
index 027de874b..73e64fac9 100644
--- a/plugins/ps/go.sum
+++ b/plugins/ps/go.sum
@@ -24,8 +24,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/registry/go.sum b/plugins/registry/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/registry/go.sum
+++ b/plugins/registry/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/repo/go.sum b/plugins/repo/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/repo/go.sum
+++ b/plugins/repo/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/resource/go.sum b/plugins/resource/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/resource/go.sum
+++ b/plugins/resource/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/scheduler-docker-local/go.sum b/plugins/scheduler-docker-local/go.sum
index e0a620ea4..a86e864e1 100644
--- a/plugins/scheduler-docker-local/go.sum
+++ b/plugins/scheduler-docker-local/go.sum
@@ -30,8 +30,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 77833b0f7..848ffbd12 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -259,8 +259,8 @@ github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+
 github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
 github.com/onsi/ginkgo/v2 v2.27.2 h1:LzwLj0b89qtIy6SSASkzlNvX6WktqurSHwkk2ipF/Ns=
 github.com/onsi/ginkgo/v2 v2.27.2/go.mod h1:ArE1D/XhNXBXCBkKOLkbsb2c81dQHCRcF5zwn/ykDRo=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
diff --git a/plugins/scheduler/go.sum b/plugins/scheduler/go.sum
index 09a418520..3d3100f0e 100644
--- a/plugins/scheduler/go.sum
+++ b/plugins/scheduler/go.sum
@@ -19,8 +19,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
diff --git a/plugins/storage/go.mod b/plugins/storage/go.mod
index 92d3e62dc..a83bb3a1a 100644
--- a/plugins/storage/go.mod
+++ b/plugins/storage/go.mod
@@ -5,7 +5,7 @@ go 1.25.5
 require (
 	github.com/dokku/dokku/plugins/common v0.0.0-00010101000000-000000000000
 	github.com/dokku/dokku/plugins/docker-options v0.0.0-00010101000000-000000000000
-	github.com/onsi/gomega v1.38.3
+	github.com/onsi/gomega v1.39.0
 	github.com/spf13/pflag v1.0.10
 )
 
diff --git a/plugins/storage/go.sum b/plugins/storage/go.sum
index 7e02672dd..3df23a76d 100644
--- a/plugins/storage/go.sum
+++ b/plugins/storage/go.sum
@@ -29,8 +29,8 @@ github.com/melbahja/goph v1.4.0 h1:z0PgDbBFe66lRYl3v5dGb9aFgPy0kotuQ37QOwSQFqs=
 github.com/melbahja/goph v1.4.0/go.mod h1:uG+VfK2Dlhk+O32zFrRlc3kYKTlV6+BtvPWd/kK7U68=
 github.com/onsi/ginkgo/v2 v2.25.3 h1:Ty8+Yi/ayDAGtk4XxmmfUy4GabvM+MegeB4cDLRi6nw=
 github.com/onsi/ginkgo/v2 v2.25.3/go.mod h1:43uiyQC4Ed2tkOzLsEYm7hnrb7UJTWHYNsuy3bG/snE=
-github.com/onsi/gomega v1.38.3 h1:eTX+W6dobAYfFeGC2PV6RwXRu/MyT+cQguijutvkpSM=
-github.com/onsi/gomega v1.38.3/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=

From 41a15a73195d13be80c919b36452c0a469158e90 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 9 Jan 2026 23:47:00 -0500
Subject: [PATCH 354/427] fix: set DOCKER_CONFIG to the directory holding the
 config.json

---
 plugins/builder-dockerfile/builder-build   | 2 +-
 plugins/builder-dockerfile/builder-release | 2 +-
 plugins/builder-herokuish/builder-build    | 2 +-
 plugins/builder-herokuish/builder-release  | 2 +-
 plugins/builder-herokuish/pre-build        | 2 +-
 plugins/builder-lambda/builder-build       | 2 +-
 plugins/builder-lambda/builder-release     | 2 +-
 plugins/builder-nixpacks/builder-build     | 2 +-
 plugins/builder-nixpacks/builder-release   | 2 +-
 plugins/builder-pack/builder-build         | 2 +-
 plugins/builder-railpack/builder-build     | 2 +-
 plugins/builder-railpack/builder-release   | 2 +-
 plugins/common/functions                   | 4 ++--
 plugins/git/git-from-image                 | 2 +-
 14 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index d15ef8fbe..93495a493 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -247,7 +247,7 @@ trigger-builder-dockerfile-builder-build() {
 
   eval "$(config_export app "$APP")"
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${DOCKERFILE_ARGS[@]}" --tag $IMAGE .
 
diff --git a/plugins/builder-dockerfile/builder-release b/plugins/builder-dockerfile/builder-release
index a9a331bd6..c19fb648c 100755
--- a/plugins/builder-dockerfile/builder-release
+++ b/plugins/builder-dockerfile/builder-release
@@ -30,7 +30,7 @@ trigger-builder-dockerfile-builder-release() {
   fi
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-dockerfile/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/builder-herokuish/builder-build b/plugins/builder-herokuish/builder-build
index d24960dc8..55b6fd0d7 100755
--- a/plugins/builder-herokuish/builder-build
+++ b/plugins/builder-herokuish/builder-build
@@ -48,7 +48,7 @@ trigger-builder-herokuish-builder-build() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=herokuish" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
diff --git a/plugins/builder-herokuish/builder-release b/plugins/builder-herokuish/builder-release
index 73df6ce7b..3c9db4be3 100755
--- a/plugins/builder-herokuish/builder-release
+++ b/plugins/builder-herokuish/builder-release
@@ -31,7 +31,7 @@ trigger-builder-herokuish-builder-release() {
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/builder-pre-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" -t "$IMAGE" "$TMP_WORK_DIR"; then
diff --git a/plugins/builder-herokuish/pre-build b/plugins/builder-herokuish/pre-build
index dc1453e96..fa293dcd6 100755
--- a/plugins/builder-herokuish/pre-build
+++ b/plugins/builder-herokuish/pre-build
@@ -42,7 +42,7 @@ trigger-builder-herokuish-pre-build-buildpack() {
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/pre-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" -t $IMAGE "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting BUILD_ENV into build environment"
diff --git a/plugins/builder-lambda/builder-build b/plugins/builder-lambda/builder-build
index d085a374e..beee01add 100755
--- a/plugins/builder-lambda/builder-build
+++ b/plugins/builder-lambda/builder-build
@@ -25,7 +25,7 @@ trigger-builder-lambda-builder-build() {
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   lambda-builder build --generate-image --write-procfile --image-env=DOCKER_LAMBDA_STAY_OPEN=1 --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=lambda "--label=com.dokku.app-name=$APP" $DOKKU_GLOBAL_BUILD_ARGS --port 5000 --tag "$IMAGE" --working-directory "$SOURCECODE_WORK_DIR"
   if [[ ! -f "$SOURCECODE_WORK_DIR/lambda.zip" ]]; then
diff --git a/plugins/builder-lambda/builder-release b/plugins/builder-lambda/builder-release
index ad3ebf32b..f5b9c3eb9 100755
--- a/plugins/builder-lambda/builder-release
+++ b/plugins/builder-lambda/builder-release
@@ -24,7 +24,7 @@ trigger-builder-lambda-builder-release() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=lambda" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-lambda/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index dd2b41871..07e636644 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -244,7 +244,7 @@ trigger-builder-nixpacks-builder-build() {
   eval "$(config_export app "$APP" --merged)"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
diff --git a/plugins/builder-nixpacks/builder-release b/plugins/builder-nixpacks/builder-release
index bf90016c7..c17bb5b7e 100755
--- a/plugins/builder-nixpacks/builder-release
+++ b/plugins/builder-nixpacks/builder-release
@@ -20,7 +20,7 @@ trigger-builder-nixpacks-builder-release() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=nixpacks" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-nixpacks/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 0041e0d23..0bf9aa924 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -294,7 +294,7 @@ trigger-builder-pack-builder-build() {
   fi
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   pack build "$IMAGE" --builder "$DOKKU_CNB_BUILDER" --path "$SOURCECODE_WORK_DIR" --default-process web "${PACK_ARGS[@]}" "${ENV_ARGS[@]}"
   docker-image-labeler relabel --label=dokku --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=pack --label=com.dokku.app-name=$APP "$IMAGE"
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 092b02be8..2329e06dd 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -126,7 +126,7 @@ trigger-builder-railpack-builder-build() {
   eval "$(config_export app "$APP" --merged)"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if ! railpack build "${RAILPACK_ARGS[@]}" --name "$IMAGE-build" "$SOURCECODE_WORK_DIR"; then
diff --git a/plugins/builder-railpack/builder-release b/plugins/builder-railpack/builder-release
index aca762295..fab96e427 100755
--- a/plugins/builder-railpack/builder-release
+++ b/plugins/builder-railpack/builder-release
@@ -20,7 +20,7 @@ trigger-builder-railpack-builder-release() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/common/functions b/plugins/common/functions
index 2bf73f328..d62d452f1 100755
--- a/plugins/common/functions
+++ b/plugins/common/functions
@@ -948,13 +948,13 @@ fn-migrate-config-to-property() {
   done
 }
 
-fn-registry-docker-config() {
+fn-registry-docker-config-dir() {
   declare desc="returns docker config file path if per-app registry credentials exist"
   declare APP="$1"
   local config_dir="/var/lib/dokku/config/registry/$APP"
   local config_file="$config_dir/config.json"
 
   if [[ -f "$config_file" ]] && [[ "$(jq -r '.auths | length' "$config_file" 2>/dev/null)" != "0" ]]; then
-    echo "$config_file"
+    echo "$config_dir"
   fi
 }
diff --git a/plugins/git/git-from-image b/plugins/git/git-from-image
index 9540dddac..99d9da1f3 100755
--- a/plugins/git/git-from-image
+++ b/plugins/git/git-from-image
@@ -27,7 +27,7 @@ trigger-git-git-from-image() {
   echo "LABEL com.dokku.docker-image-labeler/alternate-tags=[\\\"$DOCKER_IMAGE\\\"]" >>"$TMP_WORK_DIR/Dockerfile"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config "$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if [[ "$("$DOCKER_BIN" image ls -q "$DOCKER_IMAGE" 2>/dev/null)" == "" ]]; then

From f202072220f96610f2c08ee89c37f6552ce54d65 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Fri, 9 Jan 2026 23:58:52 -0500
Subject: [PATCH 355/427] fix: ensure the destination directory exists when
 extracting files from a repository

Closes #8272
---
 plugins/common/common.go | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/plugins/common/common.go b/plugins/common/common.go
index 281ff39a9..a5045d67f 100644
--- a/plugins/common/common.go
+++ b/plugins/common/common.go
@@ -123,6 +123,19 @@ func CorePostDeploy(input CorePostDeployInput) error {
 		return fmt.Errorf("Missing required Destination in CorePostDeploy for plugin %v", input.PluginName)
 	}
 
+	if !DirectoryExists(input.Destination) {
+		if err := os.MkdirAll(input.Destination, 0755); err != nil {
+			return fmt.Errorf("Unable to create destination directory %v: %s", input.Destination, err.Error())
+		}
+
+		if err := SetPermissions(SetPermissionInput{
+			Filename: input.Destination,
+			Mode:     0755,
+		}); err != nil {
+			return fmt.Errorf("Unable to set destination directory permissions %v: %s", input.Destination, err.Error())
+		}
+	}
+
 	for i, extractedPath := range input.ExtractedPaths {
 		if extractedPath.Path == "" {
 			return fmt.Errorf("Missing required Name in CorePostDeploy for index %v for plugin %v", i, input.PluginName)
@@ -250,6 +263,19 @@ func CorePostExtract(input CorePostExtractInput) error {
 	})
 	sourceImage := results.StdoutContents()
 
+	if !DirectoryExists(input.Destination) {
+		if err := os.MkdirAll(input.Destination, 0755); err != nil {
+			return fmt.Errorf("Unable to create destination directory %v: %s", input.Destination, err.Error())
+		}
+
+		if err := SetPermissions(SetPermissionInput{
+			Filename: input.Destination,
+			Mode:     0755,
+		}); err != nil {
+			return fmt.Errorf("Unable to set destination directory permissions %v: %s", input.Destination, err.Error())
+		}
+	}
+
 	for i, toExtract := range input.ToExtract {
 		if toExtract.Name == "" {
 			return fmt.Errorf("Name is required for index %v in CorePostExtract for plugin %v", i, input.PluginName)

From 3b040767e0ced7f734865a48fdef47c8b252c811 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 10 Jan 2026 00:33:22 -0500
Subject: [PATCH 356/427] fix: add missing whitespace

---
 plugins/builder-dockerfile/builder-build   | 2 +-
 plugins/builder-dockerfile/builder-release | 2 +-
 plugins/builder-herokuish/builder-build    | 2 +-
 plugins/builder-herokuish/builder-release  | 2 +-
 plugins/builder-herokuish/pre-build        | 2 +-
 plugins/builder-lambda/builder-build       | 2 +-
 plugins/builder-lambda/builder-release     | 2 +-
 plugins/builder-nixpacks/builder-build     | 2 +-
 plugins/builder-nixpacks/builder-release   | 2 +-
 plugins/builder-pack/builder-build         | 2 +-
 plugins/builder-railpack/builder-build     | 2 +-
 plugins/builder-railpack/builder-release   | 2 +-
 plugins/git/git-from-image                 | 2 +-
 13 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/plugins/builder-dockerfile/builder-build b/plugins/builder-dockerfile/builder-build
index 93495a493..751a4c2e6 100755
--- a/plugins/builder-dockerfile/builder-build
+++ b/plugins/builder-dockerfile/builder-build
@@ -247,7 +247,7 @@ trigger-builder-dockerfile-builder-build() {
 
   eval "$(config_export app "$APP")"
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${DOCKERFILE_ARGS[@]}" --tag $IMAGE .
 
diff --git a/plugins/builder-dockerfile/builder-release b/plugins/builder-dockerfile/builder-release
index c19fb648c..933978a58 100755
--- a/plugins/builder-dockerfile/builder-release
+++ b/plugins/builder-dockerfile/builder-release
@@ -30,7 +30,7 @@ trigger-builder-dockerfile-builder-release() {
   fi
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-dockerfile/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/builder-herokuish/builder-build b/plugins/builder-herokuish/builder-build
index 55b6fd0d7..4c75fcdac 100755
--- a/plugins/builder-herokuish/builder-build
+++ b/plugins/builder-herokuish/builder-build
@@ -48,7 +48,7 @@ trigger-builder-herokuish-builder-build() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=build" "--label=com.dokku.builder-type=herokuish" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
diff --git a/plugins/builder-herokuish/builder-release b/plugins/builder-herokuish/builder-release
index 3c9db4be3..34c0ffb29 100755
--- a/plugins/builder-herokuish/builder-release
+++ b/plugins/builder-herokuish/builder-release
@@ -31,7 +31,7 @@ trigger-builder-herokuish-builder-release() {
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/builder-pre-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" -t "$IMAGE" "$TMP_WORK_DIR"; then
diff --git a/plugins/builder-herokuish/pre-build b/plugins/builder-herokuish/pre-build
index fa293dcd6..11f4def91 100755
--- a/plugins/builder-herokuish/pre-build
+++ b/plugins/builder-herokuish/pre-build
@@ -42,7 +42,7 @@ trigger-builder-herokuish-pre-build-buildpack() {
   DOKKU_APP_USER=$(config_get "$APP" DOKKU_APP_USER || true)
   DOKKU_APP_USER=${DOKKU_APP_USER:="herokuishuser"}
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-herokuish/dockerfiles/pre-build.Dockerfile" --build-arg APP_IMAGE="$IMAGE" --build-arg "DOKKU_APP_USER=$DOKKU_APP_USER" -t $IMAGE "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting BUILD_ENV into build environment"
diff --git a/plugins/builder-lambda/builder-build b/plugins/builder-lambda/builder-build
index beee01add..847733c4e 100755
--- a/plugins/builder-lambda/builder-build
+++ b/plugins/builder-lambda/builder-build
@@ -25,7 +25,7 @@ trigger-builder-lambda-builder-build() {
   plugn trigger pre-build "$BUILDER_TYPE" "$APP" "$SOURCECODE_WORK_DIR"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   lambda-builder build --generate-image --write-procfile --image-env=DOCKER_LAMBDA_STAY_OPEN=1 --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=lambda "--label=com.dokku.app-name=$APP" $DOKKU_GLOBAL_BUILD_ARGS --port 5000 --tag "$IMAGE" --working-directory "$SOURCECODE_WORK_DIR"
   if [[ ! -f "$SOURCECODE_WORK_DIR/lambda.zip" ]]; then
diff --git a/plugins/builder-lambda/builder-release b/plugins/builder-lambda/builder-release
index f5b9c3eb9..5c599bf62 100755
--- a/plugins/builder-lambda/builder-release
+++ b/plugins/builder-lambda/builder-release
@@ -24,7 +24,7 @@ trigger-builder-lambda-builder-release() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=lambda" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-lambda/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/builder-nixpacks/builder-build b/plugins/builder-nixpacks/builder-build
index 07e636644..c5517a4d5 100755
--- a/plugins/builder-nixpacks/builder-build
+++ b/plugins/builder-nixpacks/builder-build
@@ -244,7 +244,7 @@ trigger-builder-nixpacks-builder-build() {
   eval "$(config_export app "$APP" --merged)"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if ! nixpacks build "${DOCKER_BUILD_LABEL_ARGS[@]}" "${NIXPACKS_ARGS[@]}" --name "$IMAGE" "$SOURCECODE_WORK_DIR"; then
diff --git a/plugins/builder-nixpacks/builder-release b/plugins/builder-nixpacks/builder-release
index c17bb5b7e..747f6492d 100755
--- a/plugins/builder-nixpacks/builder-release
+++ b/plugins/builder-nixpacks/builder-release
@@ -20,7 +20,7 @@ trigger-builder-nixpacks-builder-release() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=nixpacks" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-nixpacks/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/builder-pack/builder-build b/plugins/builder-pack/builder-build
index 0bf9aa924..ca1e50371 100755
--- a/plugins/builder-pack/builder-build
+++ b/plugins/builder-pack/builder-build
@@ -294,7 +294,7 @@ trigger-builder-pack-builder-build() {
   fi
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   pack build "$IMAGE" --builder "$DOKKU_CNB_BUILDER" --path "$SOURCECODE_WORK_DIR" --default-process web "${PACK_ARGS[@]}" "${ENV_ARGS[@]}"
   docker-image-labeler relabel --label=dokku --label=org.label-schema.schema-version=1.0 --label=org.label-schema.vendor=dokku --label=com.dokku.image-stage=build --label=com.dokku.builder-type=pack --label=com.dokku.app-name=$APP "$IMAGE"
diff --git a/plugins/builder-railpack/builder-build b/plugins/builder-railpack/builder-build
index 2329e06dd..e304be57e 100755
--- a/plugins/builder-railpack/builder-build
+++ b/plugins/builder-railpack/builder-build
@@ -126,7 +126,7 @@ trigger-builder-railpack-builder-build() {
   eval "$(config_export app "$APP" --merged)"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if ! railpack build "${RAILPACK_ARGS[@]}" --name "$IMAGE-build" "$SOURCECODE_WORK_DIR"; then
diff --git a/plugins/builder-railpack/builder-release b/plugins/builder-railpack/builder-release
index fab96e427..55b03e8c1 100755
--- a/plugins/builder-railpack/builder-release
+++ b/plugins/builder-railpack/builder-release
@@ -20,7 +20,7 @@ trigger-builder-railpack-builder-release() {
 
   local DOCKER_BUILD_LABEL_ARGS=("--label=org.label-schema.schema-version=1.0" "--label=org.label-schema.vendor=dokku" "--label=com.dokku.image-stage=release" "--label=com.dokku.builder-type=railpack" "--label=com.dokku.app-name=$APP" "--label=dokku")
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
   if ! suppress_output "$DOCKER_BIN" image build "${DOCKER_BUILD_LABEL_ARGS[@]}" $DOKKU_GLOBAL_BUILD_ARGS -f "$PLUGIN_AVAILABLE_PATH/builder-railpack/dockerfiles/builder-release.Dockerfile" --build-arg APP_IMAGE="$IMAGE" -t "$IMAGE" "$TMP_WORK_DIR"; then
     dokku_log_warn "Failure injecting docker labels on image"
diff --git a/plugins/git/git-from-image b/plugins/git/git-from-image
index 99d9da1f3..52109ba88 100755
--- a/plugins/git/git-from-image
+++ b/plugins/git/git-from-image
@@ -27,7 +27,7 @@ trigger-git-git-from-image() {
   echo "LABEL com.dokku.docker-image-labeler/alternate-tags=[\\\"$DOCKER_IMAGE\\\"]" >>"$TMP_WORK_DIR/Dockerfile"
 
   local DOCKER_CONFIG
-  DOCKER_CONFIG="$(fn-registry-docker-config-dir"$APP")"
+  DOCKER_CONFIG="$(fn-registry-docker-config-dir "$APP")"
   [[ -n "$DOCKER_CONFIG" ]] && export DOCKER_CONFIG
 
   if [[ "$("$DOCKER_BIN" image ls -q "$DOCKER_IMAGE" 2>/dev/null)" == "" ]]; then

From 21232014105060e5abebc02941da70c5e4be4f8b Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 10 Jan 2026 02:29:18 -0500
Subject: [PATCH 357/427] fix: use correct value for DOCKER_CONFIG when logging
 in or out

---
 plugins/registry/subcommands.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/registry/subcommands.go b/plugins/registry/subcommands.go
index b4bde8b7c..d2050fb99 100644
--- a/plugins/registry/subcommands.go
+++ b/plugins/registry/subcommands.go
@@ -48,7 +48,7 @@ func CommandLogin(appName string, server string, username string, password strin
 		if err := os.MkdirAll(configDir, 0700); err != nil {
 			return fmt.Errorf("Unable to create registry config directory: %w", err)
 		}
-		env["DOCKER_CONFIG"] = GetAppRegistryConfigPath(appName)
+		env["DOCKER_CONFIG"] = GetAppRegistryConfigDir(appName)
 	}
 
 	result, err := common.CallExecCommand(common.ExecCommandInput{
@@ -100,7 +100,7 @@ func CommandLogout(appName string, server string) error {
 		if !common.DirectoryExists(configDir) {
 			return fmt.Errorf("No registry credentials found for app %s", appName)
 		}
-		env["DOCKER_CONFIG"] = GetAppRegistryConfigPath(appName)
+		env["DOCKER_CONFIG"] = GetAppRegistryConfigDir(appName)
 	}
 
 	result, err := common.CallExecCommand(common.ExecCommandInput{

From b9ede65d6e4f18cd168d3da3cd38b37576062cef Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 10 Jan 2026 02:30:27 -0500
Subject: [PATCH 358/427] fix: do not stream output from login/logout commands

---
 plugins/registry/subcommands.go | 16 +++++++---------
 1 file changed, 7 insertions(+), 9 deletions(-)

diff --git a/plugins/registry/subcommands.go b/plugins/registry/subcommands.go
index d2050fb99..950516c75 100644
--- a/plugins/registry/subcommands.go
+++ b/plugins/registry/subcommands.go
@@ -52,11 +52,10 @@ func CommandLogin(appName string, server string, username string, password strin
 	}
 
 	result, err := common.CallExecCommand(common.ExecCommandInput{
-		Command:     common.DockerBin(),
-		Args:        []string{"login", "--username", username, "--password-stdin", server},
-		Env:         env,
-		Stdin:       &buffer,
-		StreamStdio: true,
+		Command: common.DockerBin(),
+		Args:    []string{"login", "--username", username, "--password-stdin", server},
+		Env:     env,
+		Stdin:   &buffer,
 	})
 	if err != nil {
 		return fmt.Errorf("Unable to run docker login: %w", err)
@@ -104,10 +103,9 @@ func CommandLogout(appName string, server string) error {
 	}
 
 	result, err := common.CallExecCommand(common.ExecCommandInput{
-		Command:     common.DockerBin(),
-		Args:        []string{"logout", server},
-		Env:         env,
-		StreamStdio: true,
+		Command: common.DockerBin(),
+		Args:    []string{"logout", server},
+		Env:     env,
 	})
 	if err != nil {
 		return fmt.Errorf("Unable to run docker logout: %w", err)

From 9bb766cf17d19bab4ebf21e1022a583949178a9f Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 10 Jan 2026 02:33:59 -0500
Subject: [PATCH 359/427] fix: reference app-specific config.json for
 retrieving registry auths

---
 plugins/registry/functions.go     | 8 ++++++++
 plugins/scheduler-k3s/go.mod      | 3 +++
 plugins/scheduler-k3s/triggers.go | 3 ++-
 3 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/plugins/registry/functions.go b/plugins/registry/functions.go
index 4c421d75d..8ef4d442f 100644
--- a/plugins/registry/functions.go
+++ b/plugins/registry/functions.go
@@ -25,6 +25,14 @@ func GetAppRegistryConfigPath(appName string) string {
 	return filepath.Join(GetAppRegistryConfigDir(appName), "config.json")
 }
 
+func GetComputedAppRegistryConfigDir(appName string) string {
+	if HasAppRegistryAuth(appName) {
+		return GetAppRegistryConfigDir(appName)
+	}
+
+	return filepath.Join(os.Getenv("DOKKU_ROOT"), ".docker")
+}
+
 // HasAppRegistryAuth checks if an app has registry credentials configured
 func HasAppRegistryAuth(appName string) bool {
 	configPath := GetAppRegistryConfigPath(appName)
diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 1ca88658d..a0f5f5870 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -12,6 +12,7 @@ require (
 	github.com/dokku/dokku/plugins/docker-options v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/logs v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/nginx-vhosts v0.0.0-20250618161309-8d0c35f1333c
+	github.com/dokku/dokku/plugins/registry v0.0.0-20250618161309-8d0c35f1333c
 	github.com/fatih/color v1.18.0
 	github.com/fluxcd/pkg/kustomize v1.24.0
 	github.com/go-openapi/jsonpointer v0.22.4
@@ -190,6 +191,8 @@ replace github.com/dokku/dokku/plugins/logs => ../logs
 
 replace github.com/dokku/dokku/plugins/nginx-vhosts => ../nginx-vhosts
 
+replace github.com/dokku/dokku/plugins/registry => ../registry
+
 replace github.com/joho/godotenv => github.com/joho/godotenv v1.2.0
 
 replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.16
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index da6d531a8..9053798bc 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -23,6 +23,7 @@ import (
 	"github.com/dokku/dokku/plugins/config"
 	"github.com/dokku/dokku/plugins/cron"
 	nginxvhosts "github.com/dokku/dokku/plugins/nginx-vhosts"
+	"github.com/dokku/dokku/plugins/registry"
 	"github.com/fatih/color"
 	"github.com/gosimple/slug"
 	"github.com/kballard/go-shellquote"
@@ -405,7 +406,7 @@ func TriggerSchedulerDeploy(scheduler string, appName string, imageTag string) e
 	pullSecretBase64 := base64.StdEncoding.EncodeToString([]byte(""))
 	imagePullSecrets := getComputedImagePullSecrets(appName)
 	if imagePullSecrets == "" {
-		dockerConfigPath := filepath.Join(os.Getenv("DOKKU_ROOT"), ".docker/config.json")
+		dockerConfigPath := filepath.Join(registry.GetComputedAppRegistryConfigDir(appName), "config.json")
 		if fi, err := os.Stat(dockerConfigPath); err == nil && !fi.IsDir() {
 			b, err := os.ReadFile(dockerConfigPath)
 			if err != nil {

From 5c2045b6ea1a978cd658b835fea47a71034e950a Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 10 Jan 2026 02:52:01 -0500
Subject: [PATCH 360/427] fix: delete the tls app chart when the app is deleted

---
 docs/deployment/schedulers/k3s.md     |  2 +
 plugins/scheduler-k3s/triggers.go     |  6 +++
 tests/unit/scheduler-k3s-certs-2.bats | 71 +++++++++++++++++++++++++++
 3 files changed, 79 insertions(+)
 create mode 100644 tests/unit/scheduler-k3s-certs-2.bats

diff --git a/docs/deployment/schedulers/k3s.md b/docs/deployment/schedulers/k3s.md
index 69de38b3d..975c51061 100644
--- a/docs/deployment/schedulers/k3s.md
+++ b/docs/deployment/schedulers/k3s.md
@@ -337,6 +337,8 @@ When a certificate is removed:
 - The app is automatically redeployed to update the ingress configuration
 - If Let's Encrypt is configured, automatic certificate generation will resume
 
+When an app is destroyed, any associated TLS secret is automatically cleaned up.
+
 ### Customizing Annotations and Labels
 
 > [!NOTE]
diff --git a/plugins/scheduler-k3s/triggers.go b/plugins/scheduler-k3s/triggers.go
index da6d531a8..a394d87ec 100644
--- a/plugins/scheduler-k3s/triggers.go
+++ b/plugins/scheduler-k3s/triggers.go
@@ -1716,6 +1716,12 @@ func TriggerSchedulerPostDelete(scheduler string, appName string) error {
 		return fmt.Errorf("Error uninstalling chart: %w", err)
 	}
 
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+	if _, err := DeleteTLSSecret(ctx, appName); err != nil {
+		common.LogWarn(fmt.Sprintf("Error deleting TLS secret for %s: %v", appName, err))
+	}
+
 	return nil
 }
 
diff --git a/tests/unit/scheduler-k3s-certs-2.bats b/tests/unit/scheduler-k3s-certs-2.bats
new file mode 100644
index 000000000..c2ecdd703
--- /dev/null
+++ b/tests/unit/scheduler-k3s-certs-2.bats
@@ -0,0 +1,71 @@
+#!/usr/bin/env bats
+
+load test_helper
+
+TEST_APP="rdmtestapp"
+
+setup_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  mkdir -p $TLS
+  tar xf $BATS_TEST_DIRNAME/server_ssl.tar -C $TLS
+  sudo chown -R dokku:dokku $TLS
+}
+
+teardown_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  rm -R $TLS
+}
+
+setup() {
+  uninstall_k3s || true
+  global_setup
+  dokku nginx:stop
+  export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
+  setup_local_tls
+}
+
+teardown() {
+  global_teardown
+  dokku nginx:start
+  uninstall_k3s || true
+  teardown_local_tls
+}
+
+@test "(scheduler-k3s:certs) app destruction deletes k8s TLS secret" {
+  if [[ -z "$DOCKERHUB_USERNAME" ]] || [[ -z "$DOCKERHUB_TOKEN" ]]; then
+    skip "skipping due to missing docker.io credentials DOCKERHUB_USERNAME:DOCKERHUB_TOKEN"
+  fi
+
+  INGRESS_CLASS=nginx install_k3s
+
+  run /bin/bash -c "dokku apps:create $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku scheduler:set $TEST_APP selected k3s"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+  assert_output_contains "Installing TLS certificate for $TEST_APP"
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku apps:destroy $TEST_APP --force"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "kubectl get secret tls-$TEST_APP -n default"
+  echo "output: $output"
+  echo "status: $status"
+  assert_failure
+}

From 68babd168a895020604f61940a7f75503614279c Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 10 Jan 2026 03:07:31 -0500
Subject: [PATCH 361/427] fix: print out Login Succeeded messages

---
 plugins/registry/subcommands.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/plugins/registry/subcommands.go b/plugins/registry/subcommands.go
index 950516c75..6c97ebd2f 100644
--- a/plugins/registry/subcommands.go
+++ b/plugins/registry/subcommands.go
@@ -64,6 +64,12 @@ func CommandLogin(appName string, server string, username string, password strin
 		return fmt.Errorf("Unable to run docker login: %s", result.StderrContents())
 	}
 
+	if appName != "" {
+		common.LogWarn(fmt.Sprintf("Login Succeeded for %s", appName))
+	} else {
+		common.LogWarn("Login Succeeded for global registry")
+	}
+
 	// todo: change the signature of the trigger to include the app name
 	_, err = common.CallPlugnTrigger(common.PlugnTriggerInput{
 		Trigger:     "post-registry-login",

From f924c0be62b221f7a0786007eac90bbd50fe354f Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Sat, 10 Jan 2026 13:50:01 +0000
Subject: [PATCH 362/427] Release 0.37.5

# History

## 0.37.5

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.5/bootstrap.sh
sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh
```

### Bug Fixes

- #8274: @josegonzalez Delete the tls app chart when the app is deleted
- #8273: @josegonzalez Ensure the destination directory exists when extracting files from a repository
- #8263: @josegonzalez Set correct version for builder-railpack plugin

### New Features

- #8268: @josegonzalez Add the ability to log into a registry on a per-app basis
- #8258: @josegonzalez Add support for dns-01 challenge mode when using traefik
- #8262: @josegonzalez Use certificates imported by certs plugin when deploying via scheduler-k3s
- #8266: @josegonzalez Add a method to force build when re-using an image with git:from-image
- #8265: @josegonzalez Add the ability to skip setting the deploy-branch when running git:sync

### Refactors

- #8264: @josegonzalez Rewrite the storage plugin in golang

### Dependencies

- #8270: @dependabot[bot] chore(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in /plugins/common
- #8267: @dependabot[bot] chore(deps): bump werkzeug from 3.1.4 to 3.1.5 in /tests/apps/python-flask
- #8260: @dependabot[bot] chore(deps): bump django from 5.2.9 to 5.2.10 in /tests/apps/dockerfile-release
- #8256: @dependabot[bot] chore(deps): bump luizm/action-sh-checker from 0.9.0 to 0.10.0
- #8257: @dependabot[bot] chore(deps): bump dj-database-url from 3.0.1 to 3.1.0 in /tests/apps/dockerfile-release
---
 HISTORY.md                                 | 35 +++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/style.css                      | 10 ++--
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder-railpack/plugin.toml       |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 58 files changed, 173 insertions(+), 138 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index 0339134ba..93e95a52c 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,40 @@
 # History
 
+## 0.37.5
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.5/bootstrap.sh
+sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8274: @josegonzalez Delete the tls app chart when the app is deleted
+- #8273: @josegonzalez Ensure the destination directory exists when extracting files from a repository
+- #8263: @josegonzalez Set correct version for builder-railpack plugin
+
+### New Features
+
+- #8268: @josegonzalez Add the ability to log into a registry on a per-app basis
+- #8258: @josegonzalez Add support for dns-01 challenge mode when using traefik
+- #8262: @josegonzalez Use certificates imported by certs plugin when deploying via scheduler-k3s
+- #8266: @josegonzalez Add a method to force build when re-using an image with git:from-image
+- #8265: @josegonzalez Add the ability to skip setting the deploy-branch when running git:sync
+
+### Refactors
+
+- #8264: @josegonzalez Rewrite the storage plugin in golang
+
+### Dependencies
+
+- #8270: @dependabot[bot] chore(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in /plugins/common
+- #8267: @dependabot[bot] chore(deps): bump werkzeug from 3.1.4 to 3.1.5 in /tests/apps/python-flask
+- #8260: @dependabot[bot] chore(deps): bump django from 5.2.9 to 5.2.10 in /tests/apps/dockerfile-release
+- #8256: @dependabot[bot] chore(deps): bump luizm/action-sh-checker from 0.9.0 to 0.10.0
+- #8257: @dependabot[bot] chore(deps): bump dj-database-url from 3.0.1 to 3.1.0 in /tests/apps/dockerfile-release
+
 ## 0.37.4
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index c1e53c8af..0d079a210 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.37.4/bootstrap.sh
-sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.5/bootstrap.sh
+sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index e5c7ea67c..5d04db7ad 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.37.4
+Version: 0.37.5
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 4f155dff6..2d79dd1c8 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.37.4 enabled    dokku core standard plugin
-  20_events            0.37.4 enabled    dokku core events logging plugin
-  app-json             0.37.4 enabled    dokku core app-json plugin
-  apps                 0.37.4 enabled    dokku core apps plugin
-  build-env            0.37.4 enabled    dokku core build-env plugin
-  buildpacks           0.37.4 enabled    dokku core buildpacks plugin
-  certs                0.37.4 enabled    dokku core certificate management plugin
-  checks               0.37.4 enabled    dokku core checks plugin
-  common               0.37.4 enabled    dokku core common plugin
-  config               0.37.4 enabled    dokku core config plugin
-  docker-options       0.37.4 enabled    dokku core docker-options plugin
-  domains              0.37.4 enabled    dokku core domains plugin
-  enter                0.37.4 enabled    dokku core enter plugin
-  git                  0.37.4 enabled    dokku core git plugin
-  logs                 0.37.4 enabled    dokku core logs plugin
-  network              0.37.4 enabled    dokku core network plugin
-  nginx-vhosts         0.37.4 enabled    dokku core nginx-vhosts plugin
-  plugin               0.37.4 enabled    dokku core plugin plugin
-  proxy                0.37.4 enabled    dokku core proxy plugin
-  ps                   0.37.4 enabled    dokku core ps plugin
-  repo                 0.37.4 enabled    dokku core repo plugin
-  resource             0.37.4 enabled    dokku core resource plugin
-  scheduler-docker-local 0.37.4 enabled    dokku core scheduler-docker-local plugin
-  shell                0.37.4 enabled    dokku core shell plugin
-  ssh-keys             0.37.4 enabled    dokku core ssh-keys plugin
-  storage              0.37.4 enabled    dokku core storage plugin
-  tags                 0.37.4 enabled    dokku core tags plugin
-  tar                  0.37.4 enabled    dokku core tar plugin
-  trace                0.37.4 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.5 enabled    dokku core standard plugin
+  20_events            0.37.5 enabled    dokku core events logging plugin
+  app-json             0.37.5 enabled    dokku core app-json plugin
+  apps                 0.37.5 enabled    dokku core apps plugin
+  build-env            0.37.5 enabled    dokku core build-env plugin
+  buildpacks           0.37.5 enabled    dokku core buildpacks plugin
+  certs                0.37.5 enabled    dokku core certificate management plugin
+  checks               0.37.5 enabled    dokku core checks plugin
+  common               0.37.5 enabled    dokku core common plugin
+  config               0.37.5 enabled    dokku core config plugin
+  docker-options       0.37.5 enabled    dokku core docker-options plugin
+  domains              0.37.5 enabled    dokku core domains plugin
+  enter                0.37.5 enabled    dokku core enter plugin
+  git                  0.37.5 enabled    dokku core git plugin
+  logs                 0.37.5 enabled    dokku core logs plugin
+  network              0.37.5 enabled    dokku core network plugin
+  nginx-vhosts         0.37.5 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.5 enabled    dokku core plugin plugin
+  proxy                0.37.5 enabled    dokku core proxy plugin
+  ps                   0.37.5 enabled    dokku core ps plugin
+  repo                 0.37.5 enabled    dokku core repo plugin
+  resource             0.37.5 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.5 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.5 enabled    dokku core shell plugin
+  ssh-keys             0.37.5 enabled    dokku core ssh-keys plugin
+  storage              0.37.5 enabled    dokku core storage plugin
+  tags                 0.37.5 enabled    dokku core tags plugin
+  tar                  0.37.5 enabled    dokku core tar plugin
+  trace                0.37.5 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index 52a5b04b2..5d1a59fab 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index b7276272f..464a72ab8 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.4\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/style.css b/docs/assets/style.css
index 67588c87d..1c47f53bd 100644
--- a/docs/assets/style.css
+++ b/docs/assets/style.css
@@ -25,9 +25,9 @@
 
   /* Avatar section darkmode fade */
   --avatar-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.4 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.5 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
   --avatar-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.4 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.5 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
 }
 
 body {
@@ -1191,15 +1191,15 @@ ul.fas li .fa-large:before {
 
   .getting-started::after {
     background: linear-gradient(0deg, rgba(52, 52, 87, 0.2) -40.97%, rgba(0, 0, 0, 0) 103.19%),
-      #0.37.4;
+      #0.37.5;
   }
 
   .tab-content {
-    background: #0.37.4;
+    background: #0.37.5;
   }
 
   .nav-tabs {
-    background: #0.37.4;
+    background: #0.37.5;
   }
 
   .powered-by_brands {
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index 3f7143d53..f5f150bec 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -34,6 +34,6 @@
     "0.34.9",
     "0.35.20",
     "0.36.11",
-    "0.37.4"
+    "0.37.5"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 7ff4c3066..37d8751e6 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.37.4-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.5-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 89fe2a0a5..3a00864fe 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.37.4
+docker pull dokku/dokku:0.37.5
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.37.4
+  dokku/dokku:0.37.5
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.37.4
+    image: dokku/dokku:0.37.5
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.37.4
+FROM dokku/dokku:0.37.5
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index eeeeb769e..cd208cb68 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -31,8 +31,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.37.4/bootstrap.sh
-sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.5/bootstrap.sh
+sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index c07a74c95..e4b116a77 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.4</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.5</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.37.4 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 620bf6ac8..036cf171e 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.4/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 3a42cbac1..3d0813d47 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index cbd3b65e7..efde26209 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index 3013f1724..a9110a92f 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index c70ba5bb4..aa34f8b29 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index b6dffc5f1..666c2a32d 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index adfa6584b..2cd4d04c8 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 959554e2b..14fb6282b 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index 78ac38794..6c41021a4 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index d5f9f80c4..f3944d95a 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index b2628c42c..88b9bd089 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder-railpack/plugin.toml b/plugins/builder-railpack/plugin.toml
index fdeb54bb7..0d424f1ec 100644
--- a/plugins/builder-railpack/plugin.toml
+++ b/plugins/builder-railpack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-railpack plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index f7d726a6c..2b016f9c1 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index 36883c545..a4538e9aa 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index dfe3607f3..a64ea3ad3 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index bae303d6f..663a49fde 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index 8d2ac0f02..b25dc63d7 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index f6b9535ee..a3930fb05 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 4cb51473b..243d4d809 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 66afaeaaf..3c79f38e2 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index 37a65ffdf..6e8ad6775 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 951eac3d3..78045301c 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index 26e4eb0d6..4d7427a02 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index 360119456..05dcbaea5 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index 1a8887f15..22f4ad6be 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index 82987b253..86872bde3 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index 83f550b15..9e2da3b0e 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 583c8c91b..921bd2a0f 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 029362896..2f8e1fd54 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 4ac81dddd..3d4409724 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 077a143a7..8bb9485f4 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 0bcefb034..3556ed17b 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 94ccd661e..11aea5b55 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index 858687636..cd860caf6 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index 20faac340..c0be32023 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 196de044c..4f5511bfd 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 9eecc57d5..67efbd291 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index c367ecdd4..23bfca799 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index a42a17174..e2fdd5216 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index e282082b2..b1622d6b2 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index aac0664bc..432948dc2 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 69b9a9670..26ac5737b 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index 2cd30603e..bb3977fb4 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 7ba9cb403..94bde1e3f 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 40994d799..50f008830 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index 6592b6034..bfa6cc0ca 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.37.4"
+version = "0.37.5"
 [plugin.config]

From 1660538e074435e695d6d46fe58341c5df1bef17 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 15 Jan 2026 13:53:58 +0000
Subject: [PATCH 363/427] chore(deps): bump traefik from 3.6.6 to 3.6.7 in
 /plugins/traefik-vhosts

Bumps traefik from 3.6.6 to 3.6.7.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index da5b901a7..361ea8173 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.6.6
+FROM traefik:3.6.7

From 7b5db312aa6aa2d49aa8fd8523d529b1be7b8a49 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 15 Jan 2026 13:54:54 +0000
Subject: [PATCH 364/427] chore(deps): bump helm.sh/helm/v3 in
 /plugins/scheduler-k3s

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.19.4 to 3.19.5.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.19.4...v3.19.5)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index a0f5f5870..126e7c646 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -26,7 +26,7 @@ require (
 	github.com/traefik/traefik/v2 v2.11.34
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
-	helm.sh/helm/v3 v3.19.4
+	helm.sh/helm/v3 v3.19.5
 	k8s.io/api v0.35.0
 	k8s.io/apimachinery v0.35.0
 	k8s.io/client-go v0.35.0
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 848ffbd12..0b83de9cc 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -538,8 +538,8 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-helm.sh/helm/v3 v3.19.4 h1:E2yFBejmZBczWr5LblhjZbvAOAwVumfBO1AtN3nqI30=
-helm.sh/helm/v3 v3.19.4/go.mod h1:PC1rk7PqacpkV4acUFMLStOOis7QM9Jq3DveHBInu4s=
+helm.sh/helm/v3 v3.19.5 h1:l8zDGBhPaF2z5pTR5ASku/yZwi0qZrWthWMzvf1ZruE=
+helm.sh/helm/v3 v3.19.5/go.mod h1:PC1rk7PqacpkV4acUFMLStOOis7QM9Jq3DveHBInu4s=
 k8s.io/api v0.35.0 h1:iBAU5LTyBI9vw3L5glmat1njFK34srdLmktWwLTprlY=
 k8s.io/api v0.35.0/go.mod h1:AQ0SNTzm4ZAczM03QH42c7l3bih1TbAXYo0DkF8ktnA=
 k8s.io/apiextensions-apiserver v0.34.2 h1:WStKftnGeoKP4AZRz/BaAAEJvYp4mlZGN0UCv+uvsqo=

From 956d372dad421a3556c4d8bfab457253a976e460 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 17 Jan 2026 21:15:25 +0000
Subject: [PATCH 365/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.34 to 2.11.35.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.35/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.34...v2.11.35)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 126e7c646..c06097f81 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.34
+	github.com/traefik/traefik/v2 v2.11.35
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.19.5
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 0b83de9cc..524e86599 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -343,8 +343,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.34 h1:TSMC60rpQHDaoYcnyiTQtHZimXenFZR+600MhHJEVoY=
-github.com/traefik/traefik/v2 v2.11.34/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
+github.com/traefik/traefik/v2 v2.11.35 h1:k3Z9GwfEx7km6TS/aMji1A/bgB2C0PW/6XcNHNzjHCc=
+github.com/traefik/traefik/v2 v2.11.35/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From fba79477df6f303f521f7deda500b166abc74ee7 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 19 Jan 2026 00:54:57 -0500
Subject: [PATCH 366/427] docs: add a readme for the docs folder

---
 docs/README.md | 158 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 158 insertions(+)
 create mode 100644 docs/README.md

diff --git a/docs/README.md b/docs/README.md
new file mode 100644
index 000000000..1cf4f56ba
--- /dev/null
+++ b/docs/README.md
@@ -0,0 +1,158 @@
+# Dokku Documentation
+
+This documentation covers the installation, configuration, and usage of Dokku - a Docker-powered PaaS that provides a Heroku-like experience.
+
+## Getting Started
+
+- [Installation](getting-started/installation/index.md) - Install Dokku on your server
+  - [Debian](getting-started/install/debian.md)
+  - [Docker](getting-started/install/docker.md)
+  - [DigitalOcean](getting-started/install/digitalocean.md)
+  - [Azure](getting-started/install/azure.md)
+  - [DreamHost](getting-started/install/dreamhost.md)
+  - [Vagrant](getting-started/install/vagrant.md)
+- [Advanced Installation](getting-started/advanced-installation.md) - Custom installation options
+- [Upgrading](getting-started/upgrading/index.md) - Upgrade to newer Dokku versions
+- [Uninstalling](getting-started/uninstalling.md) - Remove Dokku from your server
+- [Troubleshooting](getting-started/troubleshooting.md) - Common issues and solutions
+- [Where to Get Help](getting-started/where-to-get-help.md) - Support resources
+
+## Deployment
+
+- [Application Deployment](deployment/application-deployment.md) - Deploy your first app
+- [Application Management](deployment/application-management.md) - Manage deployed applications
+- [Logs](deployment/logs.md) - View application logs
+- [Remote Commands](deployment/remote-commands.md) - Run commands remotely
+- [User Management](deployment/user-management.md) - Manage SSH access
+- [Zero Downtime Deploys](deployment/zero-downtime-deploys.md) - Deploy without interruption
+
+### Deployment Methods
+
+- [Git](deployment/methods/git.md) - Deploy via git push
+- [Archive](deployment/methods/archive.md) - Deploy from tar/zip archives
+- [Image](deployment/methods/image.md) - Deploy from Docker images
+
+### Builders
+
+- [Builder Management](deployment/builders/builder-management.md) - Configure build systems
+- [Buildpack Management](deployment/builders/buildpack-management.md) - Manage buildpack settings
+- [Herokuish Buildpacks](deployment/builders/herokuish-buildpacks.md) - Heroku-compatible buildpacks
+- [Cloud Native Buildpacks](deployment/builders/cloud-native-buildpacks.md) - CNB support
+- [Dockerfiles](deployment/builders/dockerfiles.md) - Build from Dockerfile
+- [Nixpacks](deployment/builders/nixpacks.md) - Nixpacks builder
+- [Railpack](deployment/builders/railpack.md) - Railpack builder
+- [Lambda](deployment/builders/lambda.md) - Lambda-style functions
+- [Null Builder](deployment/builders/null.md) - Skip the build phase
+
+### Schedulers
+
+- [Scheduler Management](deployment/schedulers/scheduler-management.md) - Configure schedulers
+- [Docker Local](deployment/schedulers/docker-local.md) - Default Docker scheduler
+- [K3s](deployment/schedulers/k3s.md) - Lightweight Kubernetes
+- [Kubernetes](deployment/schedulers/kubernetes.md) - External Kubernetes clusters
+- [Nomad](deployment/schedulers/nomad.md) - HashiCorp Nomad
+- [Null Scheduler](deployment/schedulers/null.md) - Skip scheduling
+
+### Continuous Integration
+
+- [Generic CI](deployment/continuous-integration/generic.md) - General CI/CD setup
+- [GitHub Actions](deployment/continuous-integration/github-actions.md)
+- [GitLab CI](deployment/continuous-integration/gitlab-ci.md)
+- [Woodpecker CI](deployment/continuous-integration/woodpecker-ci.md)
+
+## Configuration
+
+- [Environment Variables](configuration/environment-variables.md) - Configure app environment
+- [Domains](configuration/domains.md) - Custom domain management
+- [SSL/TLS](configuration/ssl.md) - HTTPS and certificates
+
+## Networking
+
+- [Proxy Management](networking/proxy-management.md) - Reverse proxy configuration
+- [Port Management](networking/port-management.md) - Port mapping and exposure
+- [DNS](networking/dns.md) - DNS configuration
+- [Network](networking/network.md) - Docker network management
+
+### Proxies
+
+- [Nginx](networking/proxies/nginx.md) - Default proxy
+- [Caddy](networking/proxies/caddy.md)
+- [HAProxy](networking/proxies/haproxy.md)
+- [Traefik](networking/proxies/traefik.md)
+- [OpenResty](networking/proxies/openresty.md)
+
+## Processes
+
+- [Process Management](processes/process-management.md) - Scale and manage processes
+- [Scheduled Cron Tasks](processes/scheduled-cron-tasks.md) - Scheduled jobs
+- [One-off Tasks](processes/one-off-tasks.md) - Run one-time commands
+- [Entering Containers](processes/entering-containers.md) - Access running containers
+
+## Advanced Usage
+
+- [Persistent Storage](advanced-usage/persistent-storage.md) - Mount volumes
+- [Docker Options](advanced-usage/docker-options.md) - Custom Docker run arguments
+- [Resource Management](advanced-usage/resource-management.md) - CPU and memory limits
+- [Plugin Management](advanced-usage/plugin-management.md) - Install and manage plugins
+- [Registry Management](advanced-usage/registry-management.md) - Docker registry integration
+- [Repository Management](advanced-usage/repository-management.md) - Git repository settings
+- [Deployment Tasks](advanced-usage/deployment-tasks.md) - Pre/post deploy hooks
+- [Event Logs](advanced-usage/event-logs.md) - Dokku event history
+- [Backup and Recovery](advanced-usage/backup-recovery.md) - Data backup strategies
+
+## Development
+
+- [Plugin Creation](development/plugin-creation.md) - Build custom plugins
+- [Plugin Triggers](development/plugin-triggers.md) - Available plugin hooks
+- [Testing](development/testing.md) - Test Dokku and plugins
+- [Release Process](development/release-process.md) - How Dokku releases work
+
+## Community
+
+- [Plugins](community/plugins.md) - Community-maintained plugins
+- [Clients](community/clients.md) - API clients and tools
+
+## Enterprise
+
+- [Dokku Pro](enterprise/pro.md) - Commercial features and support
+
+## Appendices
+
+### Migration Guides
+
+- [0.37.0](appendices/0.37.0-migration-guide.md)
+- [0.36.0](appendices/0.36.0-migration-guide.md)
+- [0.35.0](appendices/0.35.0-migration-guide.md)
+- [0.34.0](appendices/0.34.0-migration-guide.md)
+- [0.33.0](appendices/0.33.0-migration-guide.md)
+- [0.32.0](appendices/0.32.0-migration-guide.md)
+- [0.31.0](appendices/0.31.0-migration-guide.md)
+- [0.30.0](appendices/0.30.0-migration-guide.md)
+- [0.29.0](appendices/0.29.0-migration-guide.md)
+- [0.28.0](appendices/0.28.0-migration-guide.md)
+- [0.27.0](appendices/0.27.0-migration-guide.md)
+- [0.26.0](appendices/0.26.0-migration-guide.md)
+- [0.25.0](appendices/0.25.0-migration-guide.md)
+- [0.24.0](appendices/0.24.0-migration-guide.md)
+- [0.23.0](appendices/0.23.0-migration-guide.md)
+- [0.22.0](appendices/0.22.0-migration-guide.md)
+- [0.21.0](appendices/0.21.0-migration-guide.md)
+- [0.20.0](appendices/0.20.0-migration-guide.md)
+- [0.10.0](appendices/0.10.0-migration-guide.md)
+- [0.9.0](appendices/0.9.0-migration-guide.md)
+- [0.8.0](appendices/0.8.0-migration-guide.md)
+- [0.7.0](appendices/0.7.0-migration-guide.md)
+- [0.6.0](appendices/0.6.0-migration-guide.md)
+- [0.5.0](appendices/0.5.0-migration-guide.md)
+
+### File Formats
+
+- [app.json](appendices/file-formats/app-json.md) - Application configuration
+- [Procfile](appendices/file-formats/procfile.md) - Process definitions
+- [Dockerfile](appendices/file-formats/dockerfile.md) - Docker build instructions
+- [.buildpacks](appendices/file-formats/buildpacks-file.md) - Buildpack configuration
+- [project.toml](appendices/file-formats/project-toml.md) - CNB configuration
+- [nixpacks.toml](appendices/file-formats/nixpacks-toml.md) - Nixpacks configuration
+- [railpack.json](appendices/file-formats/railpack-json.md) - Railpack configuration
+- [lambda.yml](appendices/file-formats/lambda-yml.md) - Lambda configuration
+- [nginx.conf.sigil](appendices/file-formats/nginx-conf-sigil.md) - Nginx template customization

From 8614706763b13aa50b64581adfba56591a6e48af Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Mon, 19 Jan 2026 01:26:48 -0500
Subject: [PATCH 367/427] docs: add an architecture document for dokku

---
 docs/README.md                   |   1 +
 docs/development/architecture.md | 316 +++++++++++++++++++++++++++++++
 docs/template.html               |   1 +
 3 files changed, 318 insertions(+)
 create mode 100644 docs/development/architecture.md

diff --git a/docs/README.md b/docs/README.md
index 1cf4f56ba..87bd433f5 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -102,6 +102,7 @@ This documentation covers the installation, configuration, and usage of Dokku -
 
 ## Development
 
+- [Architecture](development/architecture.md) - Internal architecture overview for contributors
 - [Plugin Creation](development/plugin-creation.md) - Build custom plugins
 - [Plugin Triggers](development/plugin-triggers.md) - Available plugin hooks
 - [Testing](development/testing.md) - Test Dokku and plugins
diff --git a/docs/development/architecture.md b/docs/development/architecture.md
new file mode 100644
index 000000000..2e8cdf9eb
--- /dev/null
+++ b/docs/development/architecture.md
@@ -0,0 +1,316 @@
+# Dokku Architecture
+
+This document provides a developer-focused overview of Dokku's internal architecture. It is intended for contributors who want to understand how Dokku works under the hood before diving into the codebase.
+
+## High-Level Architecture
+
+Dokku is a Docker-powered Platform as a Service (PaaS) that provides a Heroku-like deployment experience. The following diagram shows the main components and their interactions:
+
+```
++------------------+
+|     User/Client  |
++--------+---------+
+         |
+         | SSH / git push
+         v
++--------+---------+
+|   dokku binary   |
+|  (bash script)   |
++--------+---------+
+         |
+         | parse_args / execute_dokku_cmd
+         v
++--------+---------+
+|   Plugin System  |
+|      (plugn)     |
++--------+---------+
+         |
+         | triggers / subcommands
+         v
++--------+---------+     +------------------+
+|  Core Plugins    |---->|  Docker / K8s    |
+|  (apps, git,     |     |    Runtime       |
+|   config, etc.)  |     +------------------+
++------------------+
+```
+
+**Key components:**
+
+- **dokku binary**: The main entry point (`/dokku`), a bash script that handles authentication, argument parsing, and routes commands to plugins
+- **Plugin System**: Uses [plugn](https://github.com/dokku/plugn) to execute triggers and discover commands
+- **Core Plugins**: Implement all Dokku functionality (apps, git, config, builders, schedulers, proxies, etc.)
+- **Runtime**: Docker (default via `scheduler-docker-local`) or Kubernetes (via `scheduler-k3s`)
+
+## Directory Structure
+
+### Source Tree
+
+```
+dokku/
+├── dokku                 # Main CLI entry point (bash script)
+├── plugins/              # All plugin source code
+│   ├── apps/            # App management
+│   ├── git/             # Git push handling
+│   ├── config/          # Environment variables
+│   ├── builder-*/       # Build backends (herokuish, pack, dockerfile, etc.)
+│   ├── scheduler-*/     # Deployment schedulers (docker-local, k3s)
+│   ├── *-vhosts/        # Proxy implementations (nginx, traefik, caddy, etc.)
+│   └── common/          # Shared functions and utilities
+├── docs/                 # Documentation (markdown)
+├── debian/               # Debian packaging files
+├── contrib/              # Installation scripts and helpers
+└── tests/                # Integration tests (bats)
+```
+
+### Runtime Directories
+
+When Dokku is installed, it creates the following directory structure:
+
+```
+/var/lib/dokku/
+├── core-plugins/         # Core plugin binaries (installed from source)
+│   ├── available/       # All available core plugins
+│   └── enabled/         # Symlinks to enabled plugins
+├── plugins/              # Community plugins
+│   ├── available/
+│   └── enabled/
+└── data/                 # Plugin data storage
+    └── <plugin>/        # Per-plugin data
+        └── <app>/       # Per-app properties
+
+$DOKKU_ROOT (~dokku by default)
+├── <app>/               # Per-app data
+│   ├── refs/           # Git refs
+│   ├── HEAD            # Current git HEAD
+│   ├── tls/            # SSL certificates
+│   └── ...             # Other app-specific files
+└── .dokkurc/            # Global configuration overrides
+```
+
+### Plugin Directory Layout
+
+Each plugin follows a consistent structure:
+
+```
+plugins/<plugin-name>/
+├── plugin.toml           # Plugin metadata (description, version)
+├── commands              # Help output and catch-all command handler
+├── subcommands/          # Individual command implementations
+│   ├── default          # Default command (e.g., `dokku apps`)
+│   └── <command>        # Named commands (e.g., `dokku apps:create`)
+├── functions             # Public functions for other plugins to source
+├── internal-functions    # Private functions
+├── triggers.go           # Go-based trigger implementations
+├── *.go                  # Additional Go code
+└── Makefile              # Build configuration
+```
+
+## Plugin System Architecture
+
+Dokku's functionality is entirely implemented through plugins. This architecture provides:
+
+- **Extensibility**: Add new features without modifying core code
+- **Loose coupling**: Plugins communicate via well-defined triggers
+- **Composability**: Mix and match builders, schedulers, and proxies
+
+### Plugin Communication via Triggers
+
+Plugins communicate through the **trigger system** powered by [plugn](https://github.com/dokku/plugn). When a trigger is fired, plugn executes matching scripts from all enabled plugins:
+
+```
++---------------+     plugn trigger     +---------------+
+|    Plugin A   | ------------------->  |    Plugin B   |
+| (fires event) |    "post-deploy"      | (listens for  |
++---------------+                       |    event)     |
+                                        +---------------+
+                                              |
+                                              v
+                                        +---------------+
+                                        |    Plugin C   |
+                                        | (also listens)|
+                                        +---------------+
+```
+
+**Trigger execution flow:**
+
+1. A plugin calls `plugn trigger <trigger-name> [args...]`
+2. plugn searches `$PLUGIN_ENABLED_PATH/*/` for files named `<trigger-name>`
+3. Each matching executable is run with the provided arguments
+4. Triggers can return data via stdout or signal errors via exit codes
+
+**Key trigger categories:**
+
+| Category | Examples | Purpose |
+|----------|----------|---------|
+| App lifecycle | `post-create`, `pre-delete`, `post-deploy` | React to app events |
+| Build | `builder-detect`, `pre-build`, `builder-build` | Control build process |
+| Deploy | `scheduler-deploy`, `check-deploy` | Manage deployments |
+| Proxy | `proxy-build-config`, `nginx-pre-reload` | Configure reverse proxy |
+| Git | `git-pre-pull`, `receive-app` | Handle git operations |
+
+For the complete list of triggers, see [Plugin Triggers](/docs/development/plugin-triggers.md).
+
+### Calling Triggers from Go Code
+
+Go-based plugins use the `common.CallPlugnTrigger` function:
+
+```go
+result, err := common.CallPlugnTrigger(common.PlugnTriggerInput{
+    Trigger: "post-deploy",
+    Args:    []string{appName, port, ip, imageTag},
+})
+```
+
+## Command Flow
+
+When a user runs a command like `dokku apps:list`, here's what happens:
+
+```
+User runs: ssh dokku@host apps:list
+                    |
+                    v
++-------------------+-------------------+
+|           dokku bash script           |
+|  1. Source /etc/default/dokku         |
+|  2. Set DOKKU_ROOT, PLUGIN_PATH       |
+|  3. Source common/functions           |
+|  4. Call parse_args()                 |
+|  5. Check user permissions            |
++-------------------+-------------------+
+                    |
+                    v
++-------------------+-------------------+
+|          execute_dokku_cmd()          |
+|  1. Handle plugin aliases             |
+|  2. Check for subcommands/default     |
+|  3. Check for subcommands/<cmd>       |
+|  4. Fall back to commands scripts     |
++-------------------+-------------------+
+                    |
+                    v
++-------------------+-------------------+
+|  plugins/apps/subcommands/list        |
+|  (executes the actual command)        |
++-------------------+-------------------+
+```
+
+**Command resolution order:**
+
+1. Check `$PLUGIN_ENABLED_PATH/<plugin>/subcommands/default` for the default command
+2. Check `$PLUGIN_ENABLED_PATH/<plugin>/subcommands/<command>` for named commands
+3. Iterate through all `$PLUGIN_ENABLED_PATH/*/commands` scripts as fallback
+
+## Deployment Pipeline
+
+When code is pushed via `git push dokku@host:myapp`, Dokku executes a multi-stage pipeline:
+
+```
++-------------+    +-------------+    +-------------+    +-------------+
+|   Receive   |--->|    Build    |--->|   Release   |--->|   Deploy    |
++-------------+    +-------------+    +-------------+    +-------------+
+      |                  |                  |                  |
+      v                  v                  v                  v
+  git-hook          builder-detect    builder-release    scheduler-deploy
+  receive-app       pre-build                            core-post-deploy
+  post-extract      builder-build                        post-deploy
+```
+
+### Stage 1: Receive
+
+The git receive stage handles the incoming push and prepares the source code:
+
+1. `git-hook` receives the push and validates the branch
+2. `receive-app` trigger is fired
+3. Source code is extracted to a temporary directory
+4. `post-extract` trigger allows modification of source
+
+### Stage 2: Build
+
+The build stage creates a Docker image from the source:
+
+1. `builder-detect` determines the builder type (herokuish, pack, dockerfile, etc.)
+2. `pre-build` trigger runs pre-build hooks
+3. `builder-build` creates the Docker image
+4. `post-build` trigger runs post-build hooks
+
+### Stage 3: Release
+
+The release stage prepares the image for deployment:
+
+1. `pre-release-builder` allows image modifications
+2. `builder-release` sets environment variables in the image
+3. `post-release-builder` runs final release hooks
+
+### Stage 4: Deploy
+
+The deploy stage starts containers and configures networking:
+
+1. `scheduler-deploy` starts new containers
+2. `check-deploy` runs health checks
+3. `core-post-deploy` switches traffic to new containers
+4. `post-deploy` runs deployment tasks
+5. Old containers are retired
+
+## State Management
+
+Dokku uses a file-based state system for simplicity and transparency.
+
+### Property System
+
+Plugin-specific configuration is stored in the property system:
+
+```
+/var/lib/dokku/data/<plugin>/<app>/<property>
+```
+
+Properties are managed via helper functions:
+
+```bash
+# Shell
+fn-plugin-property-write "git" "$APP" "deploy-branch" "main"
+fn-plugin-property-get "git" "$APP" "deploy-branch"
+```
+
+```go
+// Go
+common.PropertyWrite("git", appName, "deploy-branch", "main")
+common.PropertyGet("git", appName, "deploy-branch")
+```
+
+### Per-App Data
+
+Application-specific data sometimes lives in `$DOKKU_ROOT/<app>/`:
+
+- `refs/` - Git references
+- `tls/` - SSL certificates
+- `ENV` - Environment file
+- Container IDs, port mappings, etc.
+
+All non-git code is being migrated to the property system.
+
+### Global Configuration
+
+Global settings can be configured via:
+
+- `/etc/default/dokku` - System-level defaults
+- `$DOKKU_ROOT/dokkurc` - User-level configuration
+- `$DOKKU_ROOT/.dokkurc/*` - Additional configuration files
+
+## Key Design Decisions
+
+| Decision | Rationale |
+|----------|-----------|
+| **Plugin-based architecture** | Enables extensibility without modifying core code. Community plugins can add databases, caching, and other services. |
+| **Bash + Go hybrid** | Bash for orchestration and simple commands; Go for performance-critical operations and complex logic. |
+| **Trigger system** | Loose coupling between plugins. Plugins don't need to know about each other; they just fire and respond to events. |
+| **File-based state** | Simple, transparent, and easy to debug. No database dependency. State can be inspected with standard Unix tools. |
+| **Docker as foundation** | Leverages Docker's container runtime, networking, and image management. Allows multiple scheduler backends. |
+
+## Further Reading
+
+- [Plugin Creation](/docs/development/plugin-creation.md) - How to create custom plugins
+- [Plugin Triggers](/docs/development/plugin-triggers.md) - Complete list of available triggers
+- [Testing](/docs/development/testing.md) - How to test Dokku and plugins
+- [Application Deployment](/docs/deployment/application-deployment.md) - User-facing deployment guide
+- [Builder Management](/docs/deployment/builders/builder-management.md) - Available build backends
+- [Scheduler Management](/docs/deployment/schedulers/scheduler-management.md) - Available scheduler backends
diff --git a/docs/template.html b/docs/template.html
index 036cf171e..4dcd4905f 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -207,6 +207,7 @@
 
             <a href="#" class="list-group-item disabled">Development</a>
 
+            <a href="/{{NAME}}/development/architecture/" class="list-group-item">Architecture</a>
             <a href="/{{NAME}}/development/plugin-creation/" class="list-group-item">Plugin Creation</a>
             <a href="/{{NAME}}/development/plugin-triggers/" class="list-group-item">Plugin Triggers</a>
             <a href="/{{NAME}}/development/testing/" class="list-group-item">Running Tests</a>

From 4cff2dd02fc0367406d08ad0f317e78b4089803a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 13:53:03 +0000
Subject: [PATCH 368/427] chore(deps): bump golang in
 /tests/apps/go-fail-predeploy

Bumps golang from 1.25.5 to 1.25.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-predeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-predeploy/Dockerfile b/tests/apps/go-fail-predeploy/Dockerfile
index 939511210..224c5ea9d 100644
--- a/tests/apps/go-fail-predeploy/Dockerfile
+++ b/tests/apps/go-fail-predeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5
+FROM golang:1.25.6
 
 EXPOSE 3000/tcp
 

From fdb85039b176976944c73673b15a30b80e6101dc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 13:53:03 +0000
Subject: [PATCH 369/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-tini

Bumps golang from 1.25.5 to 1.25.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-tini/Dockerfile b/tests/apps/zombies-dockerfile-tini/Dockerfile
index 966da4eb9..ce3248fe1 100644
--- a/tests/apps/zombies-dockerfile-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5
+FROM golang:1.25.6
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 436fcebdd801de577a4e0674feed393769d52781 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 13:53:05 +0000
Subject: [PATCH 370/427] chore(deps): bump golang from 1.25.5 to 1.25.6 in
 /tests/apps/gogrpc

Bumps golang from 1.25.5 to 1.25.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/gogrpc/Dockerfile b/tests/apps/gogrpc/Dockerfile
index 15b60f105..9d2ac9a28 100644
--- a/tests/apps/gogrpc/Dockerfile
+++ b/tests/apps/gogrpc/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5
+FROM golang:1.25.6
 
 RUN mkdir /app
 WORKDIR /app

From 09934eaa89fb07b08ed8cc9e3f1d99a9db9f4984 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 13:53:05 +0000
Subject: [PATCH 371/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-no-tini

Bumps golang from 1.25.5 to 1.25.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-no-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-no-tini/Dockerfile b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
index 599b6b9ad..d1343f76c 100644
--- a/tests/apps/zombies-dockerfile-no-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5
+FROM golang:1.25.6
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From a21debe4b0957442620093625fd6763af22e4f9b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 13:53:10 +0000
Subject: [PATCH 372/427] chore(deps): bump golang in
 /tests/apps/go-fail-postdeploy

Bumps golang from 1.25.5 to 1.25.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-postdeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-postdeploy/Dockerfile b/tests/apps/go-fail-postdeploy/Dockerfile
index 939511210..224c5ea9d 100644
--- a/tests/apps/go-fail-postdeploy/Dockerfile
+++ b/tests/apps/go-fail-postdeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.5
+FROM golang:1.25.6
 
 EXPOSE 3000/tcp
 

From eec52362cd07e0bed15df120041efaafc247559f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 13:53:29 +0000
Subject: [PATCH 373/427] chore(deps): bump soupsieve from 2.8.1 to 2.8.3 in
 /docs/_build

Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8.1 to 2.8.3.
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](https://github.com/facelessuser/soupsieve/compare/2.8.1...2.8.3)

---
updated-dependencies:
- dependency-name: soupsieve
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 3f03cf049..33e1bff72 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -18,6 +18,6 @@ python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 pyyaml_env_tag==1.1
 six==1.17.0
-soupsieve==2.8.1
+soupsieve==2.8.3
 watchdog==6.0.0
 zipp==3.23.0

From 1f5758268e7ee7c3050febe2c869726e26576df6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 21 Jan 2026 13:53:29 +0000
Subject: [PATCH 374/427] chore(deps): bump pyparsing from 3.3.1 to 3.3.2 in
 /docs/_build

Bumps [pyparsing](https://github.com/pyparsing/pyparsing) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/3.3.1...3.3.2)

---
updated-dependencies:
- dependency-name: pyparsing
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 3f03cf049..bae79ed6f 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -13,7 +13,7 @@ mkdocs-material-extensions==1.3.1
 packaging==25.0
 Pygments==2.19.2
 pymdown-extensions==10.20
-pyparsing==3.3.1
+pyparsing==3.3.2
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 pyyaml_env_tag==1.1

From 842a8f28396b8a6ee547a8c40fb28e7549edcbbf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 21 Jan 2026 23:07:04 +0000
Subject: [PATCH 375/427] chore(deps): bump lodash from 4.17.21 to 4.17.23 in
 /tests/apps/multi

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/package-lock.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/tests/apps/multi/package-lock.json b/tests/apps/multi/package-lock.json
index 85c271297..d8b115afa 100644
--- a/tests/apps/multi/package-lock.json
+++ b/tests/apps/multi/package-lock.json
@@ -1029,9 +1029,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+      "version": "4.17.23",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="
     },
     "node_modules/loud-rejection": {
       "version": "1.6.0",
@@ -2500,9 +2500,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+      "version": "4.17.23",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="
     },
     "loud-rejection": {
       "version": "1.6.0",

From 55435f549adb55cd1128426195455d3420776123 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Jan 2026 13:52:58 +0000
Subject: [PATCH 376/427] chore(deps): bump ruby in
 /tests/apps/dockerfile-entrypoint

Bumps ruby from 4.0.0 to 4.0.1.

---
updated-dependencies:
- dependency-name: ruby
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-entrypoint/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-entrypoint/Dockerfile b/tests/apps/dockerfile-entrypoint/Dockerfile
index 65f928370..76ab12859 100644
--- a/tests/apps/dockerfile-entrypoint/Dockerfile
+++ b/tests/apps/dockerfile-entrypoint/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:4.0.0
+FROM ruby:4.0.1
 
 RUN mkdir /app
 WORKDIR /app

From a5cc27eabaed7a9a24dcc66a24d15f38888cfa45 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Jan 2026 13:53:24 +0000
Subject: [PATCH 377/427] chore(deps): bump packaging from 25.0 to 26.0 in
 /docs/_build

Bumps [packaging](https://github.com/pypa/packaging) from 25.0 to 26.0.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.0)

---
updated-dependencies:
- dependency-name: packaging
  dependency-version: '26.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 3f03cf049..fe02d5b27 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -10,7 +10,7 @@ mkdocs==1.6.1
 mkdocs-exclude==1.0.2
 mkdocs-material==9.7.1
 mkdocs-material-extensions==1.3.1
-packaging==25.0
+packaging==26.0
 Pygments==2.19.2
 pymdown-extensions==10.20
 pyparsing==3.3.1

From cf6377298de17ffb1743bb372fedb2c491d3b143 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 23 Jan 2026 13:52:33 +0000
Subject: [PATCH 378/427] chore(deps): bump gunicorn in
 /tests/apps/python-flask

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 23.0.0 to 24.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/23.0.0...24.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 24.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index d11d00f57..05824da4f 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
 Werkzeug==3.1.5
-gunicorn==23.0.0
+gunicorn==24.0.0
 

From bbabba727bd141230c21e568c8e1f1ab1598fa2a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 23 Jan 2026 13:52:35 +0000
Subject: [PATCH 379/427] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in
 /tests/apps/multi

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 23.0.0 to 24.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/23.0.0...24.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 24.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/multi/requirements.txt b/tests/apps/multi/requirements.txt
index 52114619d..9291bc27f 100644
--- a/tests/apps/multi/requirements.txt
+++ b/tests/apps/multi/requirements.txt
@@ -1,2 +1,2 @@
 Flask==3.1.2
-gunicorn==23.0.0
+gunicorn==24.0.0

From 5b4d30a9ad22cdf40574c894c7897662708c61f4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 23 Jan 2026 13:54:49 +0000
Subject: [PATCH 380/427] chore(deps): bump gunicorn in
 /tests/apps/dockerfile-release

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 23.0.0 to 24.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/23.0.0...24.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 24.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index caaf92d4a..826850e35 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -53,20 +53,20 @@
         },
         "gunicorn": {
             "hashes": [
-                "sha256:ec400d38950de4dfd418cff8328b2c8faed0edb0d517d3394e457c317908ca4d",
-                "sha256:f014447a0101dc57e294f6c18ca6b40227a4c90e9bdb586042628030cba004ec"
+                "sha256:30401647ed4f162a3f7e5b8b3ed77e6e88d9a4ea5599f1ff31f7f54a7610339c",
+                "sha256:7f6c916308740942586f49f14cf3743bdfc4130c29520c42706f42fa5a2dacdb"
             ],
             "index": "pypi",
-            "markers": "python_version >= '3.7'",
-            "version": "==23.0.0"
+            "markers": "python_version >= '3.10'",
+            "version": "==24.0.0"
         },
         "packaging": {
             "hashes": [
-                "sha256:09abb1bccd265c01f4a3aa3f7a7db064b36514d2cba19a2f694fe6150451a759",
-                "sha256:c228a6dc5e932d346bc5739379109d49e8853dd8223571c7c5b55260edc0b97f"
+                "sha256:00243ae351a257117b6a241061796684b084ed1c516a08c48a3f7e147a9d80b4",
+                "sha256:b36f1fef9334a5588b4166f8bcd26a14e521f2b55e6b9de3aaa80d3ff7a37529"
             ],
             "markers": "python_version >= '3.8'",
-            "version": "==24.2"
+            "version": "==26.0"
         },
         "psycopg2-binary": {
             "hashes": [

From c4f8327ef03a89bc368be82867ffada60710b276 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sat, 24 Jan 2026 17:26:36 -0500
Subject: [PATCH 381/427] docs: fix readme indentation

---
 docs/README.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/README.md b/docs/README.md
index 87bd433f5..08ce6096d 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -5,12 +5,12 @@ This documentation covers the installation, configuration, and usage of Dokku -
 ## Getting Started
 
 - [Installation](getting-started/installation/index.md) - Install Dokku on your server
-  - [Debian](getting-started/install/debian.md)
-  - [Docker](getting-started/install/docker.md)
-  - [DigitalOcean](getting-started/install/digitalocean.md)
-  - [Azure](getting-started/install/azure.md)
-  - [DreamHost](getting-started/install/dreamhost.md)
-  - [Vagrant](getting-started/install/vagrant.md)
+    - [Debian](getting-started/install/debian.md)
+    - [Docker](getting-started/install/docker.md)
+    - [DigitalOcean](getting-started/install/digitalocean.md)
+    - [Azure](getting-started/install/azure.md)
+    - [DreamHost](getting-started/install/dreamhost.md)
+    - [Vagrant](getting-started/install/vagrant.md)
 - [Advanced Installation](getting-started/advanced-installation.md) - Custom installation options
 - [Upgrading](getting-started/upgrading/index.md) - Upgrade to newer Dokku versions
 - [Uninstalling](getting-started/uninstalling.md) - Remove Dokku from your server

From 7aa5d413501e682735f211f4d706e172be1f529f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 24 Jan 2026 22:30:36 +0000
Subject: [PATCH 382/427] chore(deps): bump helm.sh/helm/v3 in
 /plugins/scheduler-k3s

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.19.5 to 3.20.0.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.19.5...v3.20.0)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 27 ++++++-------
 plugins/scheduler-k3s/go.sum | 78 +++++++++++++-----------------------
 2 files changed, 41 insertions(+), 64 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index c06097f81..182d156be 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -26,7 +26,7 @@ require (
 	github.com/traefik/traefik/v2 v2.11.35
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
-	helm.sh/helm/v3 v3.19.5
+	helm.sh/helm/v3 v3.20.0
 	k8s.io/api v0.35.0
 	k8s.io/apimachinery v0.35.0
 	k8s.io/client-go v0.35.0
@@ -40,7 +40,7 @@ require (
 require (
 	dario.cat/mergo v1.0.2 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
-	github.com/BurntSushi/toml v1.5.0 // indirect
+	github.com/BurntSushi/toml v1.6.0 // indirect
 	github.com/MakeNowJust/heredoc v1.0.0 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
@@ -52,7 +52,7 @@ require (
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/chai2010/gettext-go v1.0.3 // indirect
-	github.com/containerd/containerd v1.7.29 // indirect
+	github.com/containerd/containerd v1.7.30 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v1.0.0-rc.1 // indirect
@@ -76,7 +76,6 @@ require (
 	github.com/go-openapi/swag v0.23.1 // indirect
 	github.com/go-openapi/swag/jsonname v0.25.4 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
-	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
@@ -132,13 +131,13 @@ require (
 	github.com/prometheus/procfs v0.17.0 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
-	github.com/rubenv/sql-migrate v1.8.0 // indirect
+	github.com/rubenv/sql-migrate v1.8.1 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/spf13/cast v1.10.0 // indirect
-	github.com/spf13/cobra v1.10.1 // indirect
+	github.com/spf13/cobra v1.10.2 // indirect
 	github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a // indirect
 	github.com/traefik/paerser v0.2.2 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
@@ -146,22 +145,22 @@ require (
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.46.0 // indirect
-	golang.org/x/mod v0.30.0 // indirect
-	golang.org/x/net v0.47.0 // indirect
+	golang.org/x/mod v0.31.0 // indirect
+	golang.org/x/net v0.48.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
-	golang.org/x/sys v0.39.0 // indirect
-	golang.org/x/term v0.38.0 // indirect
-	golang.org/x/text v0.32.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	golang.org/x/tools v0.39.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846 // indirect
 	google.golang.org/grpc v1.77.0-dev // indirect
 	google.golang.org/protobuf v1.36.10 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	k8s.io/apiextensions-apiserver v0.34.2 // indirect
-	k8s.io/apiserver v0.34.2 // indirect
+	k8s.io/apiextensions-apiserver v0.35.0 // indirect
+	k8s.io/apiserver v0.35.0 // indirect
 	k8s.io/cli-runtime v0.35.0 // indirect
 	k8s.io/component-base v0.35.0 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 524e86599..ff10b2df5 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -6,8 +6,8 @@ github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 h1:He8af
 github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6/go.mod h1:8o94RPi1/7XTJvwPpRSzSUedZrtlirdB3r9Z20bi2f8=
 github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg=
 github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
-github.com/BurntSushi/toml v1.5.0 h1:W5quZX/G/csjUnuI8SUYlsHs9M38FC7znL0lIO+DvMg=
-github.com/BurntSushi/toml v1.5.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
+github.com/BurntSushi/toml v1.6.0 h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk=
+github.com/BurntSushi/toml v1.6.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
 github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU=
 github.com/DATA-DOG/go-sqlmock v1.5.2/go.mod h1:88MAG/4G7SMwSE3CeA0ZKzrT5CiOU3OJ+JlNzwDqpNU=
 github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
@@ -42,8 +42,8 @@ github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UF
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chai2010/gettext-go v1.0.3 h1:9liNh8t+u26xl5ddmWLmsOsdNLwkdRTg5AG+JnTiM80=
 github.com/chai2010/gettext-go v1.0.3/go.mod h1:y+wnP2cHYaVj19NZhYKAwEMH2CI1gNHeQQ+5AjwawxA=
-github.com/containerd/containerd v1.7.29 h1:90fWABQsaN9mJhGkoVnuzEY+o1XDPbg9BTC9QTAHnuE=
-github.com/containerd/containerd v1.7.29/go.mod h1:azUkWcOvHrWvaiUjSQH0fjzuHIwSPg1WL5PshGP4Szs=
+github.com/containerd/containerd v1.7.30 h1:/2vezDpLDVGGmkUXmlNPLCCNKHJ5BbC5tJB5JNzQhqE=
+github.com/containerd/containerd v1.7.30/go.mod h1:fek494vwJClULlTpExsmOyKCMUAbuVjlFsJQc4/j44M=
 github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=
 github.com/containerd/errdefs v1.0.0/go.mod h1:+YBYIdtsnF4Iw6nWZhJcqGSg/dwvV7tyJ/kCkyJ2k+M=
 github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
@@ -93,8 +93,8 @@ github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
 github.com/fluxcd/pkg/kustomize v1.24.0 h1:ckFB7hh9FpJA1Oy3bYl88p9On/zsZZTbwlLBgP6eUkA=
 github.com/fluxcd/pkg/kustomize v1.24.0/go.mod h1:cydG0vKpDuUaoP5STpKfxY3zqgzaARv5HsWDOFyt5nA=
-github.com/foxcpp/go-mockdns v1.1.0 h1:jI0rD8M0wuYAxL7r/ynTrCQQq0BVqfB99Vgk7DlmewI=
-github.com/foxcpp/go-mockdns v1.1.0/go.mod h1:IhLeSFGed3mJIAXPH2aiRQB+kqz7oqu8ld2qVbOu7Wk=
+github.com/foxcpp/go-mockdns v1.2.0 h1:omK3OrHRD1IWJz1FuFBCFquhXslXoF17OvBS6JPzZF0=
+github.com/foxcpp/go-mockdns v1.2.0/go.mod h1:IhLeSFGed3mJIAXPH2aiRQB+kqz7oqu8ld2qVbOu7Wk=
 github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
 github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
 github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=
@@ -138,8 +138,6 @@ github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
 github.com/gofrs/flock v0.13.0 h1:95JolYOvGMqeH31+FC7D2+uULf6mG61mEZ/A8dRYMzw=
 github.com/gofrs/flock v0.13.0/go.mod h1:jxeyy9R1auM5S6JYDBhDt+E2TCo7DkratH4Pgi8P+Z0=
-github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
-github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
 github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
 github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg=
@@ -198,8 +196,6 @@ github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNU
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kedacore/keda/v2 v2.18.3 h1:PY3o80tzBAzCffS8J6eBZctT4B+g/r26zErNSMleC50=
 github.com/kedacore/keda/v2 v2.18.3/go.mod h1:gaFzDtqtXg6KPmMcwzeCjv7aoK8Z1I2NaUkqHkREbDk=
-github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
-github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.18.1 h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co=
 github.com/klauspost/compress v1.18.1/go.mod h1:ZQFFVG+MdnR0P+l6wpXgIL4NTtwiKIdBnrBd8Nrxr+0=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
@@ -306,8 +302,8 @@ github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs=
 github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
-github.com/rubenv/sql-migrate v1.8.0 h1:dXnYiJk9k3wetp7GfQbKJcPHjVJL6YK19tKj8t2Ns0o=
-github.com/rubenv/sql-migrate v1.8.0/go.mod h1:F2bGFBwCU+pnmbtNYDeKvSuvL6lBVtXDXUUv5t+u1qw=
+github.com/rubenv/sql-migrate v1.8.1 h1:EPNwCvjAowHI3TnZ+4fQu3a915OpnQoPAjTXCGOy2U0=
+github.com/rubenv/sql-migrate v1.8.1/go.mod h1:BTIKBORjzyxZDS6dzoiw6eAFYJ1iNlGAtjn4LGeVjS8=
 github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/ryanuber/columnize v2.1.2+incompatible h1:C89EOx/XBWwIXl8wm8OPJBd7kPF25UfsK2X7Ph/zCAk=
@@ -322,8 +318,8 @@ github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
 github.com/spf13/cast v1.10.0 h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY=
 github.com/spf13/cast v1.10.0/go.mod h1:jNfB8QC9IA6ZuY2ZjDp0KtFO2LZZlg4S/7bzP6qqeHo=
-github.com/spf13/cobra v1.10.1 h1:lJeBwCfmrnXthfAupyUTzJ/J4Nc1RsHC/mSRU2dll/s=
-github.com/spf13/cobra v1.10.1/go.mod h1:7SmJGaTHFVBY0jW4NXGluQoLvhqFQM+6XSKD+P4XaB0=
+github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=
+github.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=
 github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
@@ -349,8 +345,6 @@ github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=
 github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
-github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA=
 go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A=
@@ -409,8 +403,6 @@ go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
@@ -420,19 +412,14 @@ golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
 golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
 golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
-golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.30.0 h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk=
-golang.org/x/mod v0.30.0/go.mod h1:lAsf5O2EvJeSFMiBxXDki7sCgAxEUcZHXoXMKT4GJKc=
-golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/mod v0.31.0 h1:HaW9xtz0+kOcWKwli0ZXy79Ix+UW/vOfmWI5QVd2tgI=
+golang.org/x/mod v0.31.0/go.mod h1:43JraMp9cGx1Rx3AqioxrbrhNsLl2l/iNAvuBkrezpg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
@@ -441,13 +428,11 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
 golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
-golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
-golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
+golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
+golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
@@ -457,8 +442,6 @@ golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
 golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -474,8 +457,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
-golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
+golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -485,8 +468,8 @@ golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
 golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
-golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
-golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
+golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY=
+golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -497,24 +480,19 @@ golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
-golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
 golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
-golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
-golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
-golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
+golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
+golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
 gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
 google.golang.org/genproto v0.0.0-20250505200425-f936aa4a68b2 h1:1tXaIXCracvtsRxSBsYDiSBN0cuJvM7QYW+MrpIRY78=
@@ -538,16 +516,16 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-helm.sh/helm/v3 v3.19.5 h1:l8zDGBhPaF2z5pTR5ASku/yZwi0qZrWthWMzvf1ZruE=
-helm.sh/helm/v3 v3.19.5/go.mod h1:PC1rk7PqacpkV4acUFMLStOOis7QM9Jq3DveHBInu4s=
+helm.sh/helm/v3 v3.20.0 h1:2M+0qQwnbI1a2CxN7dbmfsWHg/MloeaFMnZCY56as50=
+helm.sh/helm/v3 v3.20.0/go.mod h1:rTavWa0lagZOxGfdhu4vgk1OjH2UYCnrDKE2PVC4N0o=
 k8s.io/api v0.35.0 h1:iBAU5LTyBI9vw3L5glmat1njFK34srdLmktWwLTprlY=
 k8s.io/api v0.35.0/go.mod h1:AQ0SNTzm4ZAczM03QH42c7l3bih1TbAXYo0DkF8ktnA=
-k8s.io/apiextensions-apiserver v0.34.2 h1:WStKftnGeoKP4AZRz/BaAAEJvYp4mlZGN0UCv+uvsqo=
-k8s.io/apiextensions-apiserver v0.34.2/go.mod h1:398CJrsgXF1wytdaanynDpJ67zG4Xq7yj91GrmYN2SE=
+k8s.io/apiextensions-apiserver v0.35.0 h1:3xHk2rTOdWXXJM+RDQZJvdx0yEOgC0FgQ1PlJatA5T4=
+k8s.io/apiextensions-apiserver v0.35.0/go.mod h1:E1Ahk9SADaLQ4qtzYFkwUqusXTcaV2uw3l14aqpL2LU=
 k8s.io/apimachinery v0.35.0 h1:Z2L3IHvPVv/MJ7xRxHEtk6GoJElaAqDCCU0S6ncYok8=
 k8s.io/apimachinery v0.35.0/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
-k8s.io/apiserver v0.34.2 h1:2/yu8suwkmES7IzwlehAovo8dDE07cFRC7KMDb1+MAE=
-k8s.io/apiserver v0.34.2/go.mod h1:gqJQy2yDOB50R3JUReHSFr+cwJnL8G1dzTA0YLEqAPI=
+k8s.io/apiserver v0.35.0 h1:CUGo5o+7hW9GcAEF3x3usT3fX4f9r8xmgQeCBDaOgX4=
+k8s.io/apiserver v0.35.0/go.mod h1:QUy1U4+PrzbJaM3XGu2tQ7U9A4udRRo5cyxkFX0GEds=
 k8s.io/cli-runtime v0.35.0 h1:PEJtYS/Zr4p20PfZSLCbY6YvaoLrfByd6THQzPworUE=
 k8s.io/cli-runtime v0.35.0/go.mod h1:VBRvHzosVAoVdP3XwUQn1Oqkvaa8facnokNkD7jOTMY=
 k8s.io/client-go v0.35.0 h1:IAW0ifFbfQQwQmga0UdoH0yvdqrbwMdq9vIFEhRpxBE=

From bdbd295a02ec8f2429a735ab9d58646571617d95 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 25 Jan 2026 22:58:10 -0500
Subject: [PATCH 383/427] fix: ensure we can call storage:report properly

Closes #8275
---
 plugins/storage/report.go                     |  2 +-
 .../storage/src/subcommands/subcommands.go    |  4 +-
 tests/unit/report.bats                        | 59 +++++++++++++++++++
 3 files changed, 62 insertions(+), 3 deletions(-)

diff --git a/plugins/storage/report.go b/plugins/storage/report.go
index d932422e0..cdb46a3d5 100644
--- a/plugins/storage/report.go
+++ b/plugins/storage/report.go
@@ -2,7 +2,7 @@ package storage
 
 import "github.com/dokku/dokku/plugins/common"
 
-func ReportSingleApp(appName string, infoFlag string, format string) error {
+func ReportSingleApp(appName string, format string, infoFlag string) error {
 	if err := common.VerifyAppName(appName); err != nil {
 		return err
 	}
diff --git a/plugins/storage/src/subcommands/subcommands.go b/plugins/storage/src/subcommands/subcommands.go
index 1939564a6..87f00c831 100644
--- a/plugins/storage/src/subcommands/subcommands.go
+++ b/plugins/storage/src/subcommands/subcommands.go
@@ -38,9 +38,9 @@ func main() {
 		mountPath := args.Arg(1)
 		err = storage.CommandMount(appName, mountPath)
 	case "report":
-		args := flag.NewFlagSet("scheduler-k3s:report", flag.ExitOnError)
+		args := flag.NewFlagSet("storage:report", flag.ExitOnError)
 		format := args.String("format", "stdout", "format: [ stdout | json ]")
-		osArgs, infoFlag, flagErr := common.ParseReportArgs("scheduler-k3s", os.Args[2:])
+		osArgs, infoFlag, flagErr := common.ParseReportArgs("storage", os.Args[2:])
 		if flagErr == nil {
 			args.Parse(osArgs)
 			appName := args.Arg(0)
diff --git a/tests/unit/report.bats b/tests/unit/report.bats
index 719af8c80..7eea94310 100644
--- a/tests/unit/report.bats
+++ b/tests/unit/report.bats
@@ -138,3 +138,62 @@ teardown() {
     assert_output_contains "You haven't deployed any applications yet"
   done
 }
+
+@test "(report) storage report when apps exist" {
+  run create_app
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  run /bin/bash -c "dokku report $TEST_APP"
+  echo "output: $output"
+  echo "status: $status"
+  assert_success
+
+  plugins=(
+    app-json
+    apps
+    builder
+    builder-dockerfile
+    builder-herokuish
+    builder-lambda
+    builder-nixpacks
+    builder-railpack
+    builder-pack
+    buildpacks
+    caddy
+    certs
+    checks
+    cron
+    docker-options
+    domains
+    git
+    haproxy
+    logs
+    network
+    nginx
+    openresty
+    ports
+    proxy
+    ps
+    registry
+    resource
+    scheduler
+    scheduler-docker-local
+    scheduler-k3s
+    storage
+    traefik
+  )
+
+  for plugin in "${plugins[@]}"; do
+    run /bin/bash -c "dokku $plugin:report 2>&1"
+    echo "output: $output"
+    echo "status: $status"
+    assert_success
+
+    run /bin/bash -c "dokku $plugin:report $TEST_APP 2>&1"
+    echo "output: $output"
+    echo "status: $status"
+    assert_success
+  done
+}

From 7d833428ac62ae737412d45a908e049f4d35c8dd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 15:05:09 +0000
Subject: [PATCH 384/427] chore(deps): bump gunicorn in
 /tests/apps/python-flask

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.0.0 to 24.1.1.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/24.0.0...24.1.1)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 24.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 05824da4f..3758b886a 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
 Werkzeug==3.1.5
-gunicorn==24.0.0
+gunicorn==24.1.1
 

From aad9072b3a43370fea8b6c6ceb70dd18fb9697fc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 15:05:18 +0000
Subject: [PATCH 385/427] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in
 /tests/apps/multi

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.0.0 to 24.1.1.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/24.0.0...24.1.1)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 24.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/multi/requirements.txt b/tests/apps/multi/requirements.txt
index 9291bc27f..4299b629c 100644
--- a/tests/apps/multi/requirements.txt
+++ b/tests/apps/multi/requirements.txt
@@ -1,2 +1,2 @@
 Flask==3.1.2
-gunicorn==24.0.0
+gunicorn==24.1.1

From f127a0433734ad9200328fbc89b1ede5b108c00b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 15:06:34 +0000
Subject: [PATCH 386/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.20 to 10.20.1.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/commits)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 10.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index 53c0a40ed..bee4feb25 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.1
 mkdocs-material-extensions==1.3.1
 packaging==26.0
 Pygments==2.19.2
-pymdown-extensions==10.20
+pymdown-extensions==10.20.1
 pyparsing==3.3.2
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From ef0787e12db349c12afc63ea09a2752c4660a25f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 15:08:42 +0000
Subject: [PATCH 387/427] chore(deps): bump gunicorn in
 /tests/apps/dockerfile-release

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.0.0 to 24.1.1.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/24.0.0...24.1.1)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 24.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index 826850e35..14364c534 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -53,12 +53,12 @@
         },
         "gunicorn": {
             "hashes": [
-                "sha256:30401647ed4f162a3f7e5b8b3ed77e6e88d9a4ea5599f1ff31f7f54a7610339c",
-                "sha256:7f6c916308740942586f49f14cf3743bdfc4130c29520c42706f42fa5a2dacdb"
+                "sha256:757f6b621fc4f7581a90600b2cd9df593461f06a41d7259cb9b94499dc4095a8",
+                "sha256:f006d110e5cb3102859b4f5cd48335dbd9cc28d0d27cd24ddbdafa6c60929408"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==24.0.0"
+            "version": "==24.1.1"
         },
         "packaging": {
             "hashes": [

From febfe26e8cbc6376b00f726b5586e4eda59a646e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 28 Jan 2026 13:53:36 +0000
Subject: [PATCH 388/427] chore(deps): bump timberio/vector in /plugins/logs

Bumps timberio/vector from 0.52.0-debian to 0.53.0-debian.

---
updated-dependencies:
- dependency-name: timberio/vector
  dependency-version: 0.53.0-debian
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/logs/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/logs/Dockerfile b/plugins/logs/Dockerfile
index a8d5eefe5..827a25b8d 100644
--- a/plugins/logs/Dockerfile
+++ b/plugins/logs/Dockerfile
@@ -1 +1 @@
-FROM timberio/vector:0.52.0-debian
+FROM timberio/vector:0.53.0-debian

From 82469c4c5fb23a5bc3fcda124731347e2fff08c3 Mon Sep 17 00:00:00 2001
From: Dokku Bot <no-reply@dokku.com>
Date: Wed, 28 Jan 2026 17:39:04 +0000
Subject: [PATCH 389/427] Release 0.37.6

# History

## 0.37.6

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.37.6/bootstrap.sh
sudo DOKKU_TAG=v0.37.6 bash bootstrap.sh
```

### Bug Fixes

- #8306: @josegonzalez Ensure we can call storage:report properly

### Documentation

- #8289: @josegonzalez Add an architecture document for dokku
- #8288: @josegonzalez Add a readme for the docs folder

### Dependencies

- #8312: @dependabot[bot] chore(deps): bump timberio/vector from 0.52.0-debian to 0.53.0-debian in /plugins/logs
- #8311: @dependabot[bot] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in /tests/apps/dockerfile-release
- #8308: @dependabot[bot] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in /tests/apps/multi
- #8309: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.20 to 10.20.1 in /docs/_build
- #8307: @dependabot[bot] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in /tests/apps/python-flask
- #8301: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.5 to 3.20.0 in /plugins/scheduler-k3s
- #8299: @dependabot[bot] chore(deps): bump ruby from 4.0.0 to 4.0.1 in /tests/apps/dockerfile-entrypoint
- #8293: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/zombies-dockerfile-no-tini
- #8296: @dependabot[bot] chore(deps): bump soupsieve from 2.8.1 to 2.8.3 in /docs/_build
- #8295: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/go-fail-postdeploy
- #8294: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/gogrpc
- #8291: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/zombies-dockerfile-tini
- #8292: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/go-fail-predeploy
- #8277: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.34 to 2.11.35 in /plugins/scheduler-k3s
- #8297: @dependabot[bot] chore(deps): bump pyparsing from 3.3.1 to 3.3.2 in /docs/_build
- #8298: @dependabot[bot] chore(deps): bump lodash from 4.17.21 to 4.17.23 in /tests/apps/multi
- #8300: @dependabot[bot] chore(deps): bump packaging from 25.0 to 26.0 in /docs/_build
- #8303: @dependabot[bot] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in /tests/apps/python-flask
- #8305: @dependabot[bot] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in /tests/apps/dockerfile-release
- #8304: @dependabot[bot] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in /tests/apps/multi
- #8280: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.4 to 3.19.5 in /plugins/scheduler-k3s
- #8279: @dependabot[bot] chore(deps): bump traefik from 3.6.6 to 3.6.7 in /plugins/traefik-vhosts
---
 HISTORY.md                                 | 43 ++++++++++++++++
 README.md                                  |  4 +-
 debian/control                             |  2 +-
 docs/advanced-usage/plugin-management.md   | 58 +++++++++++-----------
 docs/assets/favicons/browserconfig.xml     |  8 +--
 docs/assets/favicons/manifest.json         | 12 ++---
 docs/assets/style.css                      | 10 ++--
 docs/assets/versions.json                  |  2 +-
 docs/development/release-process.md        |  2 +-
 docs/getting-started/install/docker.md     |  8 +--
 docs/getting-started/installation/index.md |  4 +-
 docs/home.html                             | 40 +++++++--------
 docs/template.html                         | 36 +++++++-------
 plugins/00_dokku-standard/plugin.toml      |  2 +-
 plugins/20_events/plugin.toml              |  2 +-
 plugins/app-json/plugin.toml               |  2 +-
 plugins/apps/plugin.toml                   |  2 +-
 plugins/builder-dockerfile/plugin.toml     |  2 +-
 plugins/builder-herokuish/plugin.toml      |  2 +-
 plugins/builder-lambda/plugin.toml         |  2 +-
 plugins/builder-nixpacks/plugin.toml       |  2 +-
 plugins/builder-null/plugin.toml           |  2 +-
 plugins/builder-pack/plugin.toml           |  2 +-
 plugins/builder-railpack/plugin.toml       |  2 +-
 plugins/builder/plugin.toml                |  2 +-
 plugins/buildpacks/plugin.toml             |  2 +-
 plugins/caddy-vhosts/plugin.toml           |  2 +-
 plugins/certs/plugin.toml                  |  2 +-
 plugins/checks/plugin.toml                 |  2 +-
 plugins/common/plugin.toml                 |  2 +-
 plugins/config/plugin.toml                 |  2 +-
 plugins/cron/plugin.toml                   |  2 +-
 plugins/docker-options/plugin.toml         |  2 +-
 plugins/domains/plugin.toml                |  2 +-
 plugins/enter/plugin.toml                  |  2 +-
 plugins/git/plugin.toml                    |  2 +-
 plugins/haproxy-vhosts/plugin.toml         |  2 +-
 plugins/logs/plugin.toml                   |  2 +-
 plugins/network/plugin.toml                |  2 +-
 plugins/nginx-vhosts/plugin.toml           |  2 +-
 plugins/openresty-vhosts/plugin.toml       |  2 +-
 plugins/plugin/plugin.toml                 |  2 +-
 plugins/ports/plugin.toml                  |  2 +-
 plugins/proxy/plugin.toml                  |  2 +-
 plugins/ps/plugin.toml                     |  2 +-
 plugins/registry/plugin.toml               |  2 +-
 plugins/repo/plugin.toml                   |  2 +-
 plugins/resource/plugin.toml               |  2 +-
 plugins/run/plugin.toml                    |  2 +-
 plugins/scheduler-docker-local/plugin.toml |  2 +-
 plugins/scheduler-k3s/plugin.toml          |  2 +-
 plugins/scheduler-null/plugin.toml         |  2 +-
 plugins/scheduler/plugin.toml              |  2 +-
 plugins/shell/plugin.toml                  |  2 +-
 plugins/ssh-keys/plugin.toml               |  2 +-
 plugins/storage/plugin.toml                |  2 +-
 plugins/trace/plugin.toml                  |  2 +-
 plugins/traefik-vhosts/plugin.toml         |  2 +-
 58 files changed, 181 insertions(+), 138 deletions(-)

diff --git a/HISTORY.md b/HISTORY.md
index 93e95a52c..b4d427000 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,5 +1,48 @@
 # History
 
+## 0.37.6
+
+Install/update via the bootstrap script:
+
+```shell
+wget -NP . https://dokku.com/install/v0.37.6/bootstrap.sh
+sudo DOKKU_TAG=v0.37.6 bash bootstrap.sh
+```
+
+### Bug Fixes
+
+- #8306: @josegonzalez Ensure we can call storage:report properly
+
+### Documentation
+
+- #8289: @josegonzalez Add an architecture document for dokku
+- #8288: @josegonzalez Add a readme for the docs folder
+
+### Dependencies
+
+- #8312: @dependabot[bot] chore(deps): bump timberio/vector from 0.52.0-debian to 0.53.0-debian in /plugins/logs
+- #8311: @dependabot[bot] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in /tests/apps/dockerfile-release
+- #8308: @dependabot[bot] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in /tests/apps/multi
+- #8309: @dependabot[bot] chore(deps): bump pymdown-extensions from 10.20 to 10.20.1 in /docs/_build
+- #8307: @dependabot[bot] chore(deps): bump gunicorn from 24.0.0 to 24.1.1 in /tests/apps/python-flask
+- #8301: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.5 to 3.20.0 in /plugins/scheduler-k3s
+- #8299: @dependabot[bot] chore(deps): bump ruby from 4.0.0 to 4.0.1 in /tests/apps/dockerfile-entrypoint
+- #8293: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/zombies-dockerfile-no-tini
+- #8296: @dependabot[bot] chore(deps): bump soupsieve from 2.8.1 to 2.8.3 in /docs/_build
+- #8295: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/go-fail-postdeploy
+- #8294: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/gogrpc
+- #8291: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/zombies-dockerfile-tini
+- #8292: @dependabot[bot] chore(deps): bump golang from 1.25.5 to 1.25.6 in /tests/apps/go-fail-predeploy
+- #8277: @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.34 to 2.11.35 in /plugins/scheduler-k3s
+- #8297: @dependabot[bot] chore(deps): bump pyparsing from 3.3.1 to 3.3.2 in /docs/_build
+- #8298: @dependabot[bot] chore(deps): bump lodash from 4.17.21 to 4.17.23 in /tests/apps/multi
+- #8300: @dependabot[bot] chore(deps): bump packaging from 25.0 to 26.0 in /docs/_build
+- #8303: @dependabot[bot] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in /tests/apps/python-flask
+- #8305: @dependabot[bot] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in /tests/apps/dockerfile-release
+- #8304: @dependabot[bot] chore(deps): bump gunicorn from 23.0.0 to 24.0.0 in /tests/apps/multi
+- #8280: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.19.4 to 3.19.5 in /plugins/scheduler-k3s
+- #8279: @dependabot[bot] chore(deps): bump traefik from 3.6.6 to 3.6.7 in /plugins/traefik-vhosts
+
 ## 0.37.5
 
 Install/update via the bootstrap script:
diff --git a/README.md b/README.md
index 0d079a210..39c798aaa 100644
--- a/README.md
+++ b/README.md
@@ -85,8 +85,8 @@ Otherwise, you will need to import the keypair manually after installation using
 To install the latest stable release, run the following commands as a user who has access to `sudo`:
 
 ```shell
-wget -NP . https://dokku.com/install/v0.37.5/bootstrap.sh
-sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.6/bootstrap.sh
+sudo DOKKU_TAG=v0.37.6 bash bootstrap.sh
 ```
 
 You can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.
diff --git a/debian/control b/debian/control
index 5d04db7ad..104d4817d 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Package: dokku
-Version: 0.37.5
+Version: 0.37.6
 Section: web
 Priority: optional
 Architecture: amd64
diff --git a/docs/advanced-usage/plugin-management.md b/docs/advanced-usage/plugin-management.md
index 2d79dd1c8..2dea44e31 100644
--- a/docs/advanced-usage/plugin-management.md
+++ b/docs/advanced-usage/plugin-management.md
@@ -36,35 +36,35 @@ dokku plugin:list
 
 ```
 plugn: dev
-  00_dokku-standard    0.37.5 enabled    dokku core standard plugin
-  20_events            0.37.5 enabled    dokku core events logging plugin
-  app-json             0.37.5 enabled    dokku core app-json plugin
-  apps                 0.37.5 enabled    dokku core apps plugin
-  build-env            0.37.5 enabled    dokku core build-env plugin
-  buildpacks           0.37.5 enabled    dokku core buildpacks plugin
-  certs                0.37.5 enabled    dokku core certificate management plugin
-  checks               0.37.5 enabled    dokku core checks plugin
-  common               0.37.5 enabled    dokku core common plugin
-  config               0.37.5 enabled    dokku core config plugin
-  docker-options       0.37.5 enabled    dokku core docker-options plugin
-  domains              0.37.5 enabled    dokku core domains plugin
-  enter                0.37.5 enabled    dokku core enter plugin
-  git                  0.37.5 enabled    dokku core git plugin
-  logs                 0.37.5 enabled    dokku core logs plugin
-  network              0.37.5 enabled    dokku core network plugin
-  nginx-vhosts         0.37.5 enabled    dokku core nginx-vhosts plugin
-  plugin               0.37.5 enabled    dokku core plugin plugin
-  proxy                0.37.5 enabled    dokku core proxy plugin
-  ps                   0.37.5 enabled    dokku core ps plugin
-  repo                 0.37.5 enabled    dokku core repo plugin
-  resource             0.37.5 enabled    dokku core resource plugin
-  scheduler-docker-local 0.37.5 enabled    dokku core scheduler-docker-local plugin
-  shell                0.37.5 enabled    dokku core shell plugin
-  ssh-keys             0.37.5 enabled    dokku core ssh-keys plugin
-  storage              0.37.5 enabled    dokku core storage plugin
-  tags                 0.37.5 enabled    dokku core tags plugin
-  tar                  0.37.5 enabled    dokku core tar plugin
-  trace                0.37.5 enabled    dokku core trace plugin
+  00_dokku-standard    0.37.6 enabled    dokku core standard plugin
+  20_events            0.37.6 enabled    dokku core events logging plugin
+  app-json             0.37.6 enabled    dokku core app-json plugin
+  apps                 0.37.6 enabled    dokku core apps plugin
+  build-env            0.37.6 enabled    dokku core build-env plugin
+  buildpacks           0.37.6 enabled    dokku core buildpacks plugin
+  certs                0.37.6 enabled    dokku core certificate management plugin
+  checks               0.37.6 enabled    dokku core checks plugin
+  common               0.37.6 enabled    dokku core common plugin
+  config               0.37.6 enabled    dokku core config plugin
+  docker-options       0.37.6 enabled    dokku core docker-options plugin
+  domains              0.37.6 enabled    dokku core domains plugin
+  enter                0.37.6 enabled    dokku core enter plugin
+  git                  0.37.6 enabled    dokku core git plugin
+  logs                 0.37.6 enabled    dokku core logs plugin
+  network              0.37.6 enabled    dokku core network plugin
+  nginx-vhosts         0.37.6 enabled    dokku core nginx-vhosts plugin
+  plugin               0.37.6 enabled    dokku core plugin plugin
+  proxy                0.37.6 enabled    dokku core proxy plugin
+  ps                   0.37.6 enabled    dokku core ps plugin
+  repo                 0.37.6 enabled    dokku core repo plugin
+  resource             0.37.6 enabled    dokku core resource plugin
+  scheduler-docker-local 0.37.6 enabled    dokku core scheduler-docker-local plugin
+  shell                0.37.6 enabled    dokku core shell plugin
+  ssh-keys             0.37.6 enabled    dokku core ssh-keys plugin
+  storage              0.37.6 enabled    dokku core storage plugin
+  tags                 0.37.6 enabled    dokku core tags plugin
+  tar                  0.37.6 enabled    dokku core tar plugin
+  trace                0.37.6 enabled    dokku core trace plugin
 ```
 
 > [!WARNING]
diff --git a/docs/assets/favicons/browserconfig.xml b/docs/assets/favicons/browserconfig.xml
index 5d1a59fab..b5acbe5b7 100644
--- a/docs/assets/favicons/browserconfig.xml
+++ b/docs/assets/favicons/browserconfig.xml
@@ -2,10 +2,10 @@
 <browserconfig>
   <msapplication>
     <tile>
-      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-70x70.png"/>
-      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-150x150.png"/>
-      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-310x310.png"/>
-      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-310x150.png"/>
+      <square70x70logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/mstile-70x70.png"/>
+      <square150x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/mstile-150x150.png"/>
+      <square310x310logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/mstile-310x310.png"/>
+      <wide310x150logo src="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/mstile-310x150.png"/>
       <TileColor>#da532c</TileColor>
     </tile>
   </msapplication>
diff --git a/docs/assets/favicons/manifest.json b/docs/assets/favicons/manifest.json
index 464a72ab8..4be5bd1d0 100644
--- a/docs/assets/favicons/manifest.json
+++ b/docs/assets/favicons/manifest.json
@@ -2,37 +2,37 @@
     "name": "Dokku",
     "icons": [
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-36x36.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.6\/docs\/assets\/favicons\/android-chrome-36x36.png",
             "sizes": "36x36",
             "type": "image\/png",
             "density": "0.75"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-48x48.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.6\/docs\/assets\/favicons\/android-chrome-48x48.png",
             "sizes": "48x48",
             "type": "image\/png",
             "density": "1.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-72x72.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.6\/docs\/assets\/favicons\/android-chrome-72x72.png",
             "sizes": "72x72",
             "type": "image\/png",
             "density": "1.5"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-96x96.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.6\/docs\/assets\/favicons\/android-chrome-96x96.png",
             "sizes": "96x96",
             "type": "image\/png",
             "density": "2.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-144x144.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.6\/docs\/assets\/favicons\/android-chrome-144x144.png",
             "sizes": "144x144",
             "type": "image\/png",
             "density": "3.0"
         },
         {
-            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.5\/docs\/assets\/favicons\/android-chrome-192x192.png",
+            "src": "https:\/\/cdn.jsdelivr.net\/dokku\/dokku@v0.37.6\/docs\/assets\/favicons\/android-chrome-192x192.png",
             "sizes": "192x192",
             "type": "image\/png",
             "density": "4.0"
diff --git a/docs/assets/style.css b/docs/assets/style.css
index 1c47f53bd..b05038198 100644
--- a/docs/assets/style.css
+++ b/docs/assets/style.css
@@ -25,9 +25,9 @@
 
   /* Avatar section darkmode fade */
   --avatar-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.5 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-before-gradient: rgba(0, 0, 0, 0) linear-gradient(90deg, #0.37.6 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
   --avatar-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, white 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
-  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.5 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
+  --avatar-darkmode-after-gradient: rgba(0, 0, 0, 0) linear-gradient(270deg, #0.37.6 2.52%, rgba(255, 255, 255, 0) 100%) repeat scroll 0% 0%;
 }
 
 body {
@@ -1191,15 +1191,15 @@ ul.fas li .fa-large:before {
 
   .getting-started::after {
     background: linear-gradient(0deg, rgba(52, 52, 87, 0.2) -40.97%, rgba(0, 0, 0, 0) 103.19%),
-      #0.37.5;
+      #0.37.6;
   }
 
   .tab-content {
-    background: #0.37.5;
+    background: #0.37.6;
   }
 
   .nav-tabs {
-    background: #0.37.5;
+    background: #0.37.6;
   }
 
   .powered-by_brands {
diff --git a/docs/assets/versions.json b/docs/assets/versions.json
index f5f150bec..b4e2d13b2 100644
--- a/docs/assets/versions.json
+++ b/docs/assets/versions.json
@@ -34,6 +34,6 @@
     "0.34.9",
     "0.35.20",
     "0.36.11",
-    "0.37.5"
+    "0.37.6"
   ]
 }
diff --git a/docs/development/release-process.md b/docs/development/release-process.md
index 37d8751e6..2666efbf6 100644
--- a/docs/development/release-process.md
+++ b/docs/development/release-process.md
@@ -29,7 +29,7 @@ The workflow looks like this:
 ```shell
 # having dokku-arch in ../dokku-arch
 vagrant up build-arch
-# wait for "==> build-arch: ==> Finished making: dokku 0.37.5-2 (Mon Feb 22 23:20:37 CET 2016)"
+# wait for "==> build-arch: ==> Finished making: dokku 0.37.6-2 (Mon Feb 22 23:20:37 CET 2016)"
 cd ../dokku-arch
 git add PKGBUILD .SRCINFO
 git commit -m 'Update to dokku 0.9.9'
diff --git a/docs/getting-started/install/docker.md b/docs/getting-started/install/docker.md
index 3a00864fe..76b22b675 100644
--- a/docs/getting-started/install/docker.md
+++ b/docs/getting-started/install/docker.md
@@ -3,7 +3,7 @@
 Pull the dokku/dokku image:
 
 ```shell
-docker pull dokku/dokku:0.37.5
+docker pull dokku/dokku:0.37.6
 ```
 
 Next, run the image.
@@ -19,7 +19,7 @@ docker container run -d \
   --publish 8443:443 \
   --volume /var/lib/dokku:/mnt/dokku \
   --volume /var/run/docker.sock:/var/run/docker.sock \
-  dokku/dokku:0.37.5
+  dokku/dokku:0.37.6
 ```
 
 Alternatively, you can use `docker-compose.yml`:
@@ -27,7 +27,7 @@ Alternatively, you can use `docker-compose.yml`:
 ```yaml
 services:
   dokku:
-    image: dokku/dokku:0.37.5
+    image: dokku/dokku:0.37.6
     container_name: dokku
     network_mode: bridge
     ports:
@@ -83,7 +83,7 @@ redis: https://github.com/dokku/dokku-redis.git
 The alternative is to build a custom docker image via a custom Dockerfile. This Dockerfile can run any `plugin:install` command, though the `install` trigger must be skipped via the `--skip-install-trigger`. The version installed at that time will be the one that persists. Below is an example Dockerfile showing this method.
 
 ```Dockerfile
-FROM dokku/dokku:0.37.5
+FROM dokku/dokku:0.37.6
 RUN dokku plugin:install https://github.com/dokku/dokku-postgres.git --skip-install-trigger
 RUN dokku plugin:install https://github.com/dokku/dokku-redis.git --skip-install-trigger
 ```
diff --git a/docs/getting-started/installation/index.md b/docs/getting-started/installation/index.md
index cd208cb68..87a098384 100644
--- a/docs/getting-started/installation/index.md
+++ b/docs/getting-started/installation/index.md
@@ -31,8 +31,8 @@ To install the latest stable version of Dokku, you can run the following shell c
 
 ```shell
 # for debian systems, installs Dokku via apt-get
-wget -NP . https://dokku.com/install/v0.37.5/bootstrap.sh
-sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh
+wget -NP . https://dokku.com/install/v0.37.6/bootstrap.sh
+sudo DOKKU_TAG=v0.37.6 bash bootstrap.sh
 ```
 
 The installation process takes about 5-10 minutes, depending upon internet connection speed.
diff --git a/docs/home.html b/docs/home.html
index e4b116a77..8480c6a6c 100644
--- a/docs/home.html
+++ b/docs/home.html
@@ -10,26 +10,26 @@
     <meta name="author" content="">
     <title>Dokku - The smallest PaaS implementation you've ever seen</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-0evHe/X+R7YkIZDRvuzKMRqM+OrBnVFBL6DOitfPri4tjfHxaWutUpFmBp4vmVor" crossorigin="anonymous">
@@ -38,7 +38,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
 </head>
 
@@ -98,7 +98,7 @@
         <main class="container px-4 px-lg-5">
             <div class="row">
                 <div class="col-lg-7">
-                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.5</span></span></a>
+                    <a class="badge-link" href="https://github.com/dokku/dokku/releases"><span class="badge py-2 d-flex fit-content"><div class="circle align-self-center me-2"></div>Latest release <span id="releaseVersion" class="ms-1">v0.37.6</span></span></a>
                     <h1 class="text-white hero-heading mt-5">An open source PAAS alternative to Heroku.</h1>
                     <h4 class="text-white mt-5">Dokku helps you build and manage the lifecycle of applications from building to scaling.</h4>
                     <div class="d-flex mt-5">
@@ -125,7 +125,7 @@
                             </p>
                             <p class="line">
                                 <span class="prompt">$</span>
-                                <span class="command">sudo DOKKU_TAG=v0.37.5 bash bootstrap.sh</span>
+                                <span class="command">sudo DOKKU_TAG=v0.37.6 bash bootstrap.sh</span>
                             </p>
                             <br>
 
diff --git a/docs/template.html b/docs/template.html
index 4dcd4905f..e47da406b 100644
--- a/docs/template.html
+++ b/docs/template.html
@@ -9,26 +9,26 @@
     <meta name="author" content="">
     <title>Dokku - {{DOC_TITLE}}</title>
 
-    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-57x57.png">
-    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-60x60.png">
-    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-72x72.png">
-    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-76x76.png">
-    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-114x114.png">
-    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-120x120.png">
-    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-144x144.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-152x152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/apple-touch-icon-180x180.png">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
-    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
-    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/manifest.json">
-    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/favicon.ico">
+    <link rel="apple-touch-icon" sizes="57x57" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-57x57.png">
+    <link rel="apple-touch-icon" sizes="60x60" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-60x60.png">
+    <link rel="apple-touch-icon" sizes="72x72" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-72x72.png">
+    <link rel="apple-touch-icon" sizes="76x76" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-76x76.png">
+    <link rel="apple-touch-icon" sizes="114x114" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-114x114.png">
+    <link rel="apple-touch-icon" sizes="120x120" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-120x120.png">
+    <link rel="apple-touch-icon" sizes="144x144" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-144x144.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-152x152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/apple-touch-icon-180x180.png">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon-32x32.png" sizes="32x32">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/android-chrome-192x192.png" sizes="192x192">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon-96x96.png" sizes="96x96">
+    <link rel="icon" type="image/png" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon-16x16.png" sizes="16x16">
+    <link rel="manifest" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/manifest.json">
+    <link rel="shortcut icon" href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/favicon.ico">
     <meta name="apple-mobile-web-app-title" content="Dokku">
     <meta name="application-name" content="Dokku">
     <meta name="msapplication-TileColor" content="#da532c">
-    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/mstile-144x144.png">
-    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/favicons/browserconfig.xml">
+    <meta name="msapplication-TileImage" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/mstile-144x144.png">
+    <meta name="msapplication-config" content="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/favicons/browserconfig.xml">
     <meta name="theme-color" content="#ffffff">
 
     <script>
@@ -48,7 +48,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap" rel="stylesheet">
 
-    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.5/docs/assets/style.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/gh/dokku/dokku@v0.37.6/docs/assets/style.css" rel="stylesheet">
     <!-- <link href="./assets/style.css" rel="stylesheet"> -->
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
   </head>
diff --git a/plugins/00_dokku-standard/plugin.toml b/plugins/00_dokku-standard/plugin.toml
index 3d0813d47..89a33ba71 100644
--- a/plugins/00_dokku-standard/plugin.toml
+++ b/plugins/00_dokku-standard/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core standard plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/20_events/plugin.toml b/plugins/20_events/plugin.toml
index efde26209..066c5a271 100644
--- a/plugins/20_events/plugin.toml
+++ b/plugins/20_events/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core events logging plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/app-json/plugin.toml b/plugins/app-json/plugin.toml
index a9110a92f..29826ad21 100644
--- a/plugins/app-json/plugin.toml
+++ b/plugins/app-json/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core app-json plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/apps/plugin.toml b/plugins/apps/plugin.toml
index aa34f8b29..60969a8a4 100644
--- a/plugins/apps/plugin.toml
+++ b/plugins/apps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core apps plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-dockerfile/plugin.toml b/plugins/builder-dockerfile/plugin.toml
index 666c2a32d..24a7c8a5b 100644
--- a/plugins/builder-dockerfile/plugin.toml
+++ b/plugins/builder-dockerfile/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-dockerfile plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-herokuish/plugin.toml b/plugins/builder-herokuish/plugin.toml
index 2cd4d04c8..a6d71e5c6 100644
--- a/plugins/builder-herokuish/plugin.toml
+++ b/plugins/builder-herokuish/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-herokuish plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-lambda/plugin.toml b/plugins/builder-lambda/plugin.toml
index 14fb6282b..caecb6892 100644
--- a/plugins/builder-lambda/plugin.toml
+++ b/plugins/builder-lambda/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-lambda plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-nixpacks/plugin.toml b/plugins/builder-nixpacks/plugin.toml
index 6c41021a4..553ba7ebb 100644
--- a/plugins/builder-nixpacks/plugin.toml
+++ b/plugins/builder-nixpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-nixpacks plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-null/plugin.toml b/plugins/builder-null/plugin.toml
index f3944d95a..f2a317d0a 100644
--- a/plugins/builder-null/plugin.toml
+++ b/plugins/builder-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-null plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-pack/plugin.toml b/plugins/builder-pack/plugin.toml
index 88b9bd089..e631440b6 100644
--- a/plugins/builder-pack/plugin.toml
+++ b/plugins/builder-pack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-pack plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder-railpack/plugin.toml b/plugins/builder-railpack/plugin.toml
index 0d424f1ec..5e575d65a 100644
--- a/plugins/builder-railpack/plugin.toml
+++ b/plugins/builder-railpack/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder-railpack plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/builder/plugin.toml b/plugins/builder/plugin.toml
index 2b016f9c1..7f507d141 100644
--- a/plugins/builder/plugin.toml
+++ b/plugins/builder/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core builder plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/buildpacks/plugin.toml b/plugins/buildpacks/plugin.toml
index a4538e9aa..8fa88a92e 100644
--- a/plugins/buildpacks/plugin.toml
+++ b/plugins/buildpacks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core buildpacks plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/caddy-vhosts/plugin.toml b/plugins/caddy-vhosts/plugin.toml
index a64ea3ad3..40c6381cd 100644
--- a/plugins/caddy-vhosts/plugin.toml
+++ b/plugins/caddy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core caddy-vhosts plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/certs/plugin.toml b/plugins/certs/plugin.toml
index 663a49fde..ce9348da5 100644
--- a/plugins/certs/plugin.toml
+++ b/plugins/certs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core certificate management plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/checks/plugin.toml b/plugins/checks/plugin.toml
index b25dc63d7..5f9da42a4 100644
--- a/plugins/checks/plugin.toml
+++ b/plugins/checks/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core checks plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/common/plugin.toml b/plugins/common/plugin.toml
index a3930fb05..2f971e592 100644
--- a/plugins/common/plugin.toml
+++ b/plugins/common/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core common plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/config/plugin.toml b/plugins/config/plugin.toml
index 243d4d809..c289905b4 100644
--- a/plugins/config/plugin.toml
+++ b/plugins/config/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core config plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/cron/plugin.toml b/plugins/cron/plugin.toml
index 3c79f38e2..880d7ef42 100644
--- a/plugins/cron/plugin.toml
+++ b/plugins/cron/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core cron plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/docker-options/plugin.toml b/plugins/docker-options/plugin.toml
index 6e8ad6775..eb191eab6 100644
--- a/plugins/docker-options/plugin.toml
+++ b/plugins/docker-options/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core docker-options plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/domains/plugin.toml b/plugins/domains/plugin.toml
index 78045301c..e37130193 100644
--- a/plugins/domains/plugin.toml
+++ b/plugins/domains/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core domains plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/enter/plugin.toml b/plugins/enter/plugin.toml
index 4d7427a02..ddfe928fc 100644
--- a/plugins/enter/plugin.toml
+++ b/plugins/enter/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core enter plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/git/plugin.toml b/plugins/git/plugin.toml
index 05dcbaea5..c2cb04ee4 100644
--- a/plugins/git/plugin.toml
+++ b/plugins/git/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core git plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/haproxy-vhosts/plugin.toml b/plugins/haproxy-vhosts/plugin.toml
index 22f4ad6be..bfc2eba8d 100644
--- a/plugins/haproxy-vhosts/plugin.toml
+++ b/plugins/haproxy-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core haproxy-vhosts plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/logs/plugin.toml b/plugins/logs/plugin.toml
index 86872bde3..89235b58d 100644
--- a/plugins/logs/plugin.toml
+++ b/plugins/logs/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core logs plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/network/plugin.toml b/plugins/network/plugin.toml
index 9e2da3b0e..33d106e33 100644
--- a/plugins/network/plugin.toml
+++ b/plugins/network/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core network plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/nginx-vhosts/plugin.toml b/plugins/nginx-vhosts/plugin.toml
index 921bd2a0f..aca18efeb 100644
--- a/plugins/nginx-vhosts/plugin.toml
+++ b/plugins/nginx-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core nginx-vhosts plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/openresty-vhosts/plugin.toml b/plugins/openresty-vhosts/plugin.toml
index 2f8e1fd54..6e1f11731 100644
--- a/plugins/openresty-vhosts/plugin.toml
+++ b/plugins/openresty-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core openresty-vhosts plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/plugin/plugin.toml b/plugins/plugin/plugin.toml
index 3d4409724..8a8824acd 100644
--- a/plugins/plugin/plugin.toml
+++ b/plugins/plugin/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core plugin plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/ports/plugin.toml b/plugins/ports/plugin.toml
index 8bb9485f4..10a6e9ec3 100644
--- a/plugins/ports/plugin.toml
+++ b/plugins/ports/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ports plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/proxy/plugin.toml b/plugins/proxy/plugin.toml
index 3556ed17b..c448064c2 100644
--- a/plugins/proxy/plugin.toml
+++ b/plugins/proxy/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core proxy plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/ps/plugin.toml b/plugins/ps/plugin.toml
index 11aea5b55..9a8045ee6 100644
--- a/plugins/ps/plugin.toml
+++ b/plugins/ps/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ps plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/registry/plugin.toml b/plugins/registry/plugin.toml
index cd860caf6..a99c70842 100644
--- a/plugins/registry/plugin.toml
+++ b/plugins/registry/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core registry plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/repo/plugin.toml b/plugins/repo/plugin.toml
index c0be32023..8d3183c64 100644
--- a/plugins/repo/plugin.toml
+++ b/plugins/repo/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core repo plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/resource/plugin.toml b/plugins/resource/plugin.toml
index 4f5511bfd..2a528f7dc 100644
--- a/plugins/resource/plugin.toml
+++ b/plugins/resource/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core resource plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/run/plugin.toml b/plugins/run/plugin.toml
index 67efbd291..749c1a129 100644
--- a/plugins/run/plugin.toml
+++ b/plugins/run/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core run plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/scheduler-docker-local/plugin.toml b/plugins/scheduler-docker-local/plugin.toml
index 23bfca799..96582670e 100644
--- a/plugins/scheduler-docker-local/plugin.toml
+++ b/plugins/scheduler-docker-local/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-docker-local plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/scheduler-k3s/plugin.toml b/plugins/scheduler-k3s/plugin.toml
index e2fdd5216..c90f8663f 100644
--- a/plugins/scheduler-k3s/plugin.toml
+++ b/plugins/scheduler-k3s/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-k3s plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/scheduler-null/plugin.toml b/plugins/scheduler-null/plugin.toml
index b1622d6b2..9cb124875 100644
--- a/plugins/scheduler-null/plugin.toml
+++ b/plugins/scheduler-null/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler-null plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/scheduler/plugin.toml b/plugins/scheduler/plugin.toml
index 432948dc2..617b00f23 100644
--- a/plugins/scheduler/plugin.toml
+++ b/plugins/scheduler/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core scheduler plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/shell/plugin.toml b/plugins/shell/plugin.toml
index 26ac5737b..03558fd62 100644
--- a/plugins/shell/plugin.toml
+++ b/plugins/shell/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core shell plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/ssh-keys/plugin.toml b/plugins/ssh-keys/plugin.toml
index bb3977fb4..69996825b 100644
--- a/plugins/ssh-keys/plugin.toml
+++ b/plugins/ssh-keys/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core ssh-keys plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/storage/plugin.toml b/plugins/storage/plugin.toml
index 94bde1e3f..e6b7fe0ca 100644
--- a/plugins/storage/plugin.toml
+++ b/plugins/storage/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core storage plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/trace/plugin.toml b/plugins/trace/plugin.toml
index 50f008830..3d246da2f 100644
--- a/plugins/trace/plugin.toml
+++ b/plugins/trace/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core trace plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]
diff --git a/plugins/traefik-vhosts/plugin.toml b/plugins/traefik-vhosts/plugin.toml
index bfa6cc0ca..6f85bf4f4 100644
--- a/plugins/traefik-vhosts/plugin.toml
+++ b/plugins/traefik-vhosts/plugin.toml
@@ -1,4 +1,4 @@
 [plugin]
 description = "dokku core traefik-vhosts plugin"
-version = "0.37.5"
+version = "0.37.6"
 [plugin.config]

From 47b0dd23bd0cf8487074742c66b5e93a8a418112 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Feb 2026 15:33:52 +0000
Subject: [PATCH 390/427] chore(deps): bump gunicorn in
 /tests/apps/python-flask

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.1.1 to 25.0.1.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/24.1.1...25.0.1)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 3758b886a..497f9e4b1 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
 Werkzeug==3.1.5
-gunicorn==24.1.1
+gunicorn==25.0.1
 

From ab6c1eaedcfc54270e9f054bd713523a71b7cc6f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Feb 2026 15:33:56 +0000
Subject: [PATCH 391/427] chore(deps): bump gunicorn from 24.1.1 to 25.0.1 in
 /tests/apps/multi

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.1.1 to 25.0.1.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/24.1.1...25.0.1)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/multi/requirements.txt b/tests/apps/multi/requirements.txt
index 4299b629c..e65ca38b6 100644
--- a/tests/apps/multi/requirements.txt
+++ b/tests/apps/multi/requirements.txt
@@ -1,2 +1,2 @@
 Flask==3.1.2
-gunicorn==24.1.1
+gunicorn==25.0.1

From b65de7dcbbf1877635edfc944629b8a6c4b43361 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Feb 2026 15:36:58 +0000
Subject: [PATCH 392/427] chore(deps): bump
 github.com/cert-manager/cert-manager

Bumps [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) from 1.19.2 to 1.19.3.
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](https://github.com/cert-manager/cert-manager/compare/v1.19.2...v1.19.3)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 182d156be..54394039c 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -4,7 +4,7 @@ go 1.25.5
 
 require (
 	github.com/Masterminds/semver/v3 v3.4.0
-	github.com/cert-manager/cert-manager v1.19.2
+	github.com/cert-manager/cert-manager v1.19.3
 	github.com/dokku/dokku/plugins/app-json v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/common v0.0.0-20250618161309-8d0c35f1333c
 	github.com/dokku/dokku/plugins/config v0.0.0-20250618161309-8d0c35f1333c
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index ff10b2df5..f6b3e5a3f 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -36,8 +36,8 @@ github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK3
 github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
 github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
-github.com/cert-manager/cert-manager v1.19.2 h1:jSprN1h5pgNDSl7HClAmIzXuTxic/5FXJ32kbQHqjlM=
-github.com/cert-manager/cert-manager v1.19.2/go.mod h1:e9NzLtOKxTw7y99qLyWGmPo6mrC1Nh0EKKcMkRfK+GE=
+github.com/cert-manager/cert-manager v1.19.3 h1:3d0Nk/HO3BOmAdBJNaBh+6YgaO3Ciey3xCpOjiX5Obs=
+github.com/cert-manager/cert-manager v1.19.3/go.mod h1:e9NzLtOKxTw7y99qLyWGmPo6mrC1Nh0EKKcMkRfK+GE=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chai2010/gettext-go v1.0.3 h1:9liNh8t+u26xl5ddmWLmsOsdNLwkdRTg5AG+JnTiM80=

From 4c16f7df8258c24112e61ba1afce12e93c72b026 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Feb 2026 15:37:15 +0000
Subject: [PATCH 393/427] chore(deps): bump gunicorn in
 /tests/apps/dockerfile-release

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.1.1 to 25.0.1.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/24.1.1...25.0.1)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index 14364c534..6bc7acab2 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -53,12 +53,12 @@
         },
         "gunicorn": {
             "hashes": [
-                "sha256:757f6b621fc4f7581a90600b2cd9df593461f06a41d7259cb9b94499dc4095a8",
-                "sha256:f006d110e5cb3102859b4f5cd48335dbd9cc28d0d27cd24ddbdafa6c60929408"
+                "sha256:23cbe968c6ae3c8efc3d118c8353fa0763efc2102d89d0d3cea696cede7ff6b1",
+                "sha256:573e053aa950246e307ea908bd7ddce1870d41a40aec0c935938c586f0b9b946"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==24.1.1"
+            "version": "==25.0.1"
         },
         "packaging": {
             "hashes": [

From 81f32a143beb1a67ae323217a8612253113912da Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Feb 2026 13:54:36 +0000
Subject: [PATCH 394/427] chore(deps): bump django in
 /tests/apps/dockerfile-release

Bumps [django](https://github.com/django/django) from 5.2.10 to 5.2.11.
- [Commits](https://github.com/django/django/commits)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index 6bc7acab2..dd215ce78 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -18,11 +18,11 @@
     "default": {
         "asgiref": {
             "hashes": [
-                "sha256:13acff32519542a1736223fb79a715acdebe24286d98e8b164a73085f40da2c4",
-                "sha256:1db9021efadb0d9512ce8ffaf72fcef601c7b73a8807a1bb2ef143dc6b14846d"
+                "sha256:5f184dc43b7e763efe848065441eac62229c9f7b0475f41f80e207a114eda4ce",
+                "sha256:e8667a091e69529631969fd45dc268fa79b99c92c5fcdda727757e52146ec133"
             ],
             "markers": "python_version >= '3.9'",
-            "version": "==3.11.0"
+            "version": "==3.11.1"
         },
         "dj-database-url": {
             "hashes": [
@@ -35,12 +35,12 @@
         },
         "django": {
             "hashes": [
-                "sha256:74df100784c288c50a2b5cad59631d71214f40f72051d5af3fdf220c20bdbbbe",
-                "sha256:cf85067a64250c95d5f9067b056c5eaa80591929f7e16fbcd997746e40d6c45c"
+                "sha256:7f2d292ad8b9ee35e405d965fbbad293758b858c34bbf7f3df551aeeac6f02d3",
+                "sha256:e7130df33ada9ab5e5e929bc19346a20fe383f5454acb2cc004508f242ee92c0"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==5.2.10"
+            "version": "==5.2.11"
         },
         "djangorestframework": {
             "hashes": [

From a9ae0ec6ad92c438d5dc038e0479e583c83bfcd4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Feb 2026 13:54:38 +0000
Subject: [PATCH 395/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.35 to 2.11.36.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.36/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.35...v2.11.36)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 54394039c..221fb1c88 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.35
+	github.com/traefik/traefik/v2 v2.11.36
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.20.0
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index f6b3e5a3f..61521ff79 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -339,8 +339,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.35 h1:k3Z9GwfEx7km6TS/aMji1A/bgB2C0PW/6XcNHNzjHCc=
-github.com/traefik/traefik/v2 v2.11.35/go.mod h1:4IsMkzOastNmRZoIvVSKTGFcJ8arGaOkYuenYDOlDM8=
+github.com/traefik/traefik/v2 v2.11.36 h1:S8w3p74WpoQHChDi1MPdVO/bLNHWGbA48RkTdk9TXMA=
+github.com/traefik/traefik/v2 v2.11.36/go.mod h1:19sRX1gJDnFJvR1SZmGTPQQgJ+/8SVmpSFF3TQrl4mU=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From 5cc4c3da3644a7db1f68944ee4c0207c1df32fd7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Feb 2026 13:52:29 +0000
Subject: [PATCH 396/427] chore(deps): bump gunicorn from 25.0.1 to 25.0.2 in
 /tests/apps/multi

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.1 to 25.0.2.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/25.0.1...v25.0.2)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/multi/requirements.txt b/tests/apps/multi/requirements.txt
index e65ca38b6..3eebdd625 100644
--- a/tests/apps/multi/requirements.txt
+++ b/tests/apps/multi/requirements.txt
@@ -1,2 +1,2 @@
 Flask==3.1.2
-gunicorn==25.0.1
+gunicorn==25.0.2

From 9e6aba96f26fb4ee4a7faadc91ce5274a85acbfe Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Feb 2026 13:52:39 +0000
Subject: [PATCH 397/427] chore(deps): bump gunicorn in
 /tests/apps/python-flask

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.1 to 25.0.2.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/25.0.1...v25.0.2)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 497f9e4b1..39d20597b 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
 Werkzeug==3.1.5
-gunicorn==25.0.1
+gunicorn==25.0.2
 

From 01cb3c3cfc4e15ddcf755500fc526a3c227c49e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Feb 2026 13:55:02 +0000
Subject: [PATCH 398/427] chore(deps): bump gunicorn in
 /tests/apps/dockerfile-release

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.1 to 25.0.2.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/25.0.1...v25.0.2)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index dd215ce78..7649daf7f 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -53,12 +53,12 @@
         },
         "gunicorn": {
             "hashes": [
-                "sha256:23cbe968c6ae3c8efc3d118c8353fa0763efc2102d89d0d3cea696cede7ff6b1",
-                "sha256:573e053aa950246e307ea908bd7ddce1870d41a40aec0c935938c586f0b9b946"
+                "sha256:288c002141d73ec8d05fdbb7c8453e3d01d3209d8ff6ad425df0ae1430153ca2",
+                "sha256:8e44f2f7cf791de60c84ce119221c26121fd2ffcb27badfbced5a1c919d35d67"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==25.0.1"
+            "version": "==25.0.2"
         },
         "packaging": {
             "hashes": [

From 77603ee82eac64ad77627410304c8649432851d3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 9 Feb 2026 15:33:04 +0000
Subject: [PATCH 399/427] chore(deps-dev): bump
 org.apache.maven.plugins:maven-dependency-plugin

Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/java/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/java/pom.xml b/tests/apps/java/pom.xml
index e11ececea..5946852dd 100644
--- a/tests/apps/java/pom.xml
+++ b/tests/apps/java/pom.xml
@@ -23,7 +23,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-dependency-plugin</artifactId>
-                <version>3.9.0</version>
+                <version>3.10.0</version>
                 <executions>
                     <execution>
                         <id>copy-dependencies</id>

From eb6777be4a973d4d0dba35d7d2d82f0b46489d49 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 9 Feb 2026 15:34:11 +0000
Subject: [PATCH 400/427] chore(deps): bump python in
 /tests/apps/dockerfile-release

Bumps python from 3.14.2-bookworm to 3.14.3-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.3-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/dockerfile-release/Dockerfile b/tests/apps/dockerfile-release/Dockerfile
index bfcd664d8..11bd0347d 100644
--- a/tests/apps/dockerfile-release/Dockerfile
+++ b/tests/apps/dockerfile-release/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.14.2-bookworm
+FROM python:3.14.3-bookworm
 
 RUN pip install --user pipenv
 ENV PATH="${PATH}:/root/.local/bin"

From 2a1704ff6a8ae7303c4639d5212b7de4ab3d71bf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 10 Feb 2026 13:53:58 +0000
Subject: [PATCH 401/427] chore(deps): bump sigs.k8s.io/kustomize/api in
 /plugins/scheduler-k3s

Bumps [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) from 0.21.0 to 0.21.1.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](https://github.com/kubernetes-sigs/kustomize/compare/api/v0.21.0...api/v0.21.1)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 4 ++--
 plugins/scheduler-k3s/go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 221fb1c88..407c3b579 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -34,7 +34,7 @@ require (
 	k8s.io/kubernetes v1.35.0
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	mvdan.cc/sh/v3 v3.12.0
-	sigs.k8s.io/kustomize/api v0.21.0
+	sigs.k8s.io/kustomize/api v0.21.1
 )
 
 require (
@@ -170,7 +170,7 @@ require (
 	sigs.k8s.io/controller-runtime v0.22.4 // indirect
 	sigs.k8s.io/gateway-api v1.4.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
-	sigs.k8s.io/kustomize/kyaml v0.21.0 // indirect
+	sigs.k8s.io/kustomize/kyaml v0.21.1 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
 	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 61521ff79..1a82ba3d9 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -554,10 +554,10 @@ sigs.k8s.io/gateway-api v1.4.0 h1:ZwlNM6zOHq0h3WUX2gfByPs2yAEsy/EenYJB78jpQfQ=
 sigs.k8s.io/gateway-api v1.4.0/go.mod h1:AR5RSqciWP98OPckEjOjh2XJhAe2Na4LHyXD2FUY7Qk=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
-sigs.k8s.io/kustomize/api v0.21.0 h1:I7nry5p8iDJbuRdYS7ez8MUvw7XVNPcIP5GkzzuXIIQ=
-sigs.k8s.io/kustomize/api v0.21.0/go.mod h1:XGVQuR5n2pXKWbzXHweZU683pALGw/AMVO4zU4iS8SE=
-sigs.k8s.io/kustomize/kyaml v0.21.0 h1:7mQAf3dUwf0wBerWJd8rXhVcnkk5Tvn/q91cGkaP6HQ=
-sigs.k8s.io/kustomize/kyaml v0.21.0/go.mod h1:hmxADesM3yUN2vbA5z1/YTBnzLJ1dajdqpQonwBL1FQ=
+sigs.k8s.io/kustomize/api v0.21.1 h1:lzqbzvz2CSvsjIUZUBNFKtIMsEw7hVLJp0JeSIVmuJs=
+sigs.k8s.io/kustomize/api v0.21.1/go.mod h1:f3wkKByTrgpgltLgySCntrYoq5d3q7aaxveSagwTlwI=
+sigs.k8s.io/kustomize/kyaml v0.21.1 h1:IVlbmhC076nf6foyL6Taw4BkrLuEsXUXNpsE+ScX7fI=
+sigs.k8s.io/kustomize/kyaml v0.21.1/go.mod h1:hmxADesM3yUN2vbA5z1/YTBnzLJ1dajdqpQonwBL1FQ=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
 sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
 sigs.k8s.io/structured-merge-diff/v6 v6.3.0 h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco=

From fba51a1906c8438789de05d9ddd3318d49a44ba4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Feb 2026 13:52:50 +0000
Subject: [PATCH 402/427] chore(deps): bump golang in
 /tests/apps/go-fail-predeploy

Bumps golang from 1.25.6 to 1.26.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-predeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-predeploy/Dockerfile b/tests/apps/go-fail-predeploy/Dockerfile
index 224c5ea9d..9f2b68526 100644
--- a/tests/apps/go-fail-predeploy/Dockerfile
+++ b/tests/apps/go-fail-predeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.6
+FROM golang:1.26.0
 
 EXPOSE 3000/tcp
 

From d534fc6f2c00c400ee52e7d874057bcf91b80099 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Feb 2026 13:52:51 +0000
Subject: [PATCH 403/427] chore(deps): bump golang from 1.25.6 to 1.26.0 in
 /tests/apps/gogrpc

Bumps golang from 1.25.6 to 1.26.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/gogrpc/Dockerfile b/tests/apps/gogrpc/Dockerfile
index 9d2ac9a28..e5e6c9e5c 100644
--- a/tests/apps/gogrpc/Dockerfile
+++ b/tests/apps/gogrpc/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.6
+FROM golang:1.26.0
 
 RUN mkdir /app
 WORKDIR /app

From ba162a6ffa9961b30ccd7904c844c9f170bb604a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Feb 2026 13:52:55 +0000
Subject: [PATCH 404/427] chore(deps): bump golang in
 /tests/apps/go-fail-postdeploy

Bumps golang from 1.25.6 to 1.26.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/go-fail-postdeploy/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/go-fail-postdeploy/Dockerfile b/tests/apps/go-fail-postdeploy/Dockerfile
index 224c5ea9d..9f2b68526 100644
--- a/tests/apps/go-fail-postdeploy/Dockerfile
+++ b/tests/apps/go-fail-postdeploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.6
+FROM golang:1.26.0
 
 EXPOSE 3000/tcp
 

From 43842213a758fb547af0bf00d813577f4b92a1d9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Feb 2026 13:52:55 +0000
Subject: [PATCH 405/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-no-tini

Bumps golang from 1.25.6 to 1.26.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-no-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-no-tini/Dockerfile b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
index d1343f76c..d45824ed4 100644
--- a/tests/apps/zombies-dockerfile-no-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-no-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.6
+FROM golang:1.26.0
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From a80822a9da04e2fd2cfb4a61a5cc482e50c6c63b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Feb 2026 13:52:59 +0000
Subject: [PATCH 406/427] chore(deps): bump golang in
 /tests/apps/zombies-dockerfile-tini

Bumps golang from 1.25.6 to 1.26.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/zombies-dockerfile-tini/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/zombies-dockerfile-tini/Dockerfile b/tests/apps/zombies-dockerfile-tini/Dockerfile
index ce3248fe1..c663e0b12 100644
--- a/tests/apps/zombies-dockerfile-tini/Dockerfile
+++ b/tests/apps/zombies-dockerfile-tini/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.6
+FROM golang:1.26.0
 
 ADD . /go/src/github.com/dokku/apps/web
 WORKDIR /go/src/github.com/dokku/apps/web

From 334b3186c15f935faa7a4c4a38529e53b91c7197 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Feb 2026 14:52:58 +0000
Subject: [PATCH 407/427] chore(deps): bump pymdown-extensions in /docs/_build

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.20.1 to 10.21.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/commits/10.21)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: '10.21'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index bee4feb25..ba19cd63f 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -12,7 +12,7 @@ mkdocs-material==9.7.1
 mkdocs-material-extensions==1.3.1
 packaging==26.0
 Pygments==2.19.2
-pymdown-extensions==10.20.1
+pymdown-extensions==10.21
 pyparsing==3.3.2
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3

From 64886aae2281c5cf0bf7fcd0ed45832faccb3298 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 20 Feb 2026 13:52:36 +0000
Subject: [PATCH 408/427] chore(deps): bump werkzeug in
 /tests/apps/python-flask

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.5 to 3.1.6.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.1.5...3.1.6)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 39d20597b..0ee25c9bd 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.2
 Jinja2==3.1.6
-Werkzeug==3.1.5
+Werkzeug==3.1.6
 gunicorn==25.0.2
 

From 918cba4f1bab1f134ecf172d0e504e06915bfd7e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 20 Feb 2026 13:54:38 +0000
Subject: [PATCH 409/427] chore(deps): bump dj-database-url in
 /tests/apps/dockerfile-release

Bumps [dj-database-url](https://github.com/jazzband/dj-database-url) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/jazzband/dj-database-url/releases)
- [Changelog](https://github.com/jazzband/dj-database-url/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jazzband/dj-database-url/compare/v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: dj-database-url
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index 7649daf7f..de435190e 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -26,12 +26,12 @@
         },
         "dj-database-url": {
             "hashes": [
-                "sha256:155a56fbbecbaaf1348ccd73bf29138b4c9988363ba08261a0f0145e392e638c",
-                "sha256:d80218426b83f9302c8d27d4fccf52de5cf0cab179f0645fb2839f37605d1353"
+                "sha256:544e015fee3efa5127a1eb1cca465f4ace578265b3671fe61d0ed7dbafb5ec8a",
+                "sha256:63c20e4bbaa51690dfd4c8d189521f6bf6bc9da9fcdb23d95d2ee8ee87f9ec62"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==3.1.0"
+            "version": "==3.1.2"
         },
         "django": {
             "hashes": [

From 0af185df3d0d4bb6494a9b2ff8ec637089e90d14 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Feb 2026 14:52:12 +0000
Subject: [PATCH 410/427] chore(deps): bump byjg/easy-haproxy in
 /plugins/haproxy-vhosts

Bumps byjg/easy-haproxy from 5.0.0 to 6.0.1.

---
updated-dependencies:
- dependency-name: byjg/easy-haproxy
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/haproxy-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/haproxy-vhosts/Dockerfile b/plugins/haproxy-vhosts/Dockerfile
index dfca69b27..47928453b 100644
--- a/plugins/haproxy-vhosts/Dockerfile
+++ b/plugins/haproxy-vhosts/Dockerfile
@@ -1 +1 @@
-FROM byjg/easy-haproxy:5.0.0
+FROM byjg/easy-haproxy:6.0.1

From 02a0a47ffb867b05db46ddbfc2be0d34aaa4d341 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 24 Feb 2026 13:54:27 +0000
Subject: [PATCH 411/427] chore(deps): bump mkdocs-material from 9.7.1 to 9.7.3
 in /docs/_build

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.1 to 9.7.3.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.7.1...9.7.3)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/requirements.txt b/docs/_build/requirements.txt
index bee4feb25..1036b4aac 100644
--- a/docs/_build/requirements.txt
+++ b/docs/_build/requirements.txt
@@ -8,7 +8,7 @@ MarkupSafe==3.0.3
 mergedeep==1.3.4
 mkdocs==1.6.1
 mkdocs-exclude==1.0.2
-mkdocs-material==9.7.1
+mkdocs-material==9.7.3
 mkdocs-material-extensions==1.3.1
 packaging==26.0
 Pygments==2.19.2

From d9c70c55a86516a81d3da56cd3ff03dff84ee500 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 24 Feb 2026 13:54:58 +0000
Subject: [PATCH 412/427] chore(deps): bump traefik from 3.6.7 to 3.6.9 in
 /plugins/traefik-vhosts

Bumps traefik from 3.6.7 to 3.6.9.

---
updated-dependencies:
- dependency-name: traefik
  dependency-version: 3.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/traefik-vhosts/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/traefik-vhosts/Dockerfile b/plugins/traefik-vhosts/Dockerfile
index 361ea8173..e0059d6f2 100644
--- a/plugins/traefik-vhosts/Dockerfile
+++ b/plugins/traefik-vhosts/Dockerfile
@@ -1 +1 @@
-FROM traefik:3.6.7
+FROM traefik:3.6.9

From a70184c65d93df3bf0634694251442132d9889ad Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 25 Feb 2026 04:36:21 +0000
Subject: [PATCH 413/427] chore(deps): bump flask from 3.1.2 to 3.1.3 in
 /tests/apps/python-flask

Bumps [flask](https://github.com/pallets/flask) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/3.1.3/CHANGES.rst)
- [Commits](https://github.com/pallets/flask/compare/3.1.2...3.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 0ee25c9bd..1859f621c 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,4 +1,4 @@
-Flask==3.1.2
+Flask==3.1.3
 Jinja2==3.1.6
 Werkzeug==3.1.6
 gunicorn==25.0.2

From 2c102cc8155458db0f543c7b9066c93919b8d58c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 25 Feb 2026 04:36:43 +0000
Subject: [PATCH 414/427] chore(deps): bump gunicorn in
 /tests/apps/dockerfile-release

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.2 to 25.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/25.0.2...25.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index de435190e..cf0dde1a9 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -53,12 +53,12 @@
         },
         "gunicorn": {
             "hashes": [
-                "sha256:288c002141d73ec8d05fdbb7c8453e3d01d3209d8ff6ad425df0ae1430153ca2",
-                "sha256:8e44f2f7cf791de60c84ce119221c26121fd2ffcb27badfbced5a1c919d35d67"
+                "sha256:1426611d959fa77e7de89f8c0f32eed6aa03ee735f98c01efba3e281b1c47616",
+                "sha256:d0b1236ccf27f72cfe14bce7caadf467186f19e865094ca84221424e839b8b8b"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.10'",
-            "version": "==25.0.2"
+            "version": "==25.1.0"
         },
         "packaging": {
             "hashes": [

From 1651b8abf4cc097942127b9d33e34d683d7b3c61 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 25 Feb 2026 04:36:50 +0000
Subject: [PATCH 415/427] chore(deps): bump github.com/traefik/traefik/v2

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.36 to 2.11.37.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/master/CHANGELOG.md)
- [Commits](https://github.com/traefik/traefik/compare/v2.11.36...v2.11.37)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-version: 2.11.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/scheduler-k3s/go.mod | 2 +-
 plugins/scheduler-k3s/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod
index 407c3b579..22c2fe2b2 100644
--- a/plugins/scheduler-k3s/go.mod
+++ b/plugins/scheduler-k3s/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/kedacore/keda/v2 v2.18.3
 	github.com/ryanuber/columnize v2.1.2+incompatible
 	github.com/spf13/pflag v1.0.10
-	github.com/traefik/traefik/v2 v2.11.36
+	github.com/traefik/traefik/v2 v2.11.38
 	golang.org/x/sync v0.19.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.20.0
diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum
index 1a82ba3d9..ee6309750 100644
--- a/plugins/scheduler-k3s/go.sum
+++ b/plugins/scheduler-k3s/go.sum
@@ -339,8 +339,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj
 github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo=
 github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ=
 github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24=
-github.com/traefik/traefik/v2 v2.11.36 h1:S8w3p74WpoQHChDi1MPdVO/bLNHWGbA48RkTdk9TXMA=
-github.com/traefik/traefik/v2 v2.11.36/go.mod h1:19sRX1gJDnFJvR1SZmGTPQQgJ+/8SVmpSFF3TQrl4mU=
+github.com/traefik/traefik/v2 v2.11.38 h1:A0+6AIlKFApmzJPCDtr1uNllZYTxI1Pr+TcdU7dgy3o=
+github.com/traefik/traefik/v2 v2.11.38/go.mod h1:19sRX1gJDnFJvR1SZmGTPQQgJ+/8SVmpSFF3TQrl4mU=
 github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=

From c65eec7027edf24fe7d5a125c48365b7c9590aef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 27 Feb 2026 13:52:39 +0000
Subject: [PATCH 416/427] chore(deps): bump actions/download-artifact from 7 to
 8

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9248c220d..1138e8ee9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -120,7 +120,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: download packages
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: build
           path: build
@@ -159,7 +159,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: download packages
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: build
           path: build
@@ -193,7 +193,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: download packages
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: build
           path: build
@@ -230,7 +230,7 @@ jobs:
 
     steps:
       - name: download test-results
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           path: test-results
 

From 704035b92dd6e5a253295b1d2a52bbc0bd4598cf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 27 Feb 2026 13:52:47 +0000
Subject: [PATCH 417/427] chore(deps): bump actions/upload-artifact from 6 to 7

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml      | 6 +++---
 .github/workflows/release.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9248c220d..0e57db8db 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
           echo "matrix=$json" >> $GITHUB_OUTPUT
 
       - name: upload packages
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: build
           path: build
@@ -143,7 +143,7 @@ jobs:
           SYNC_GITHUB_PASSWORD: ${{ secrets.SYNC_GITHUB_PASSWORD }}
           SYNC_GITHUB_USERNAME: ${{ secrets.SYNC_GITHUB_USERNAME }}
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: test-results-${{ matrix.index }}
           path: test-results
@@ -214,7 +214,7 @@ jobs:
             2) sudo -E make -e deploy-test-multi ;;
             3) sudo -E make -e deploy-test-go-fail-predeploy deploy-test-go-fail-postdeploy ;;
           esac
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: coverage.${{ matrix.index }}
           path: test-results/coverage
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1ed1a4c9e..b84ccdcd5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,7 +73,7 @@ jobs:
         run: echo "version=$(cat build/next-version)" >> $GITHUB_OUTPUT
 
       - name: upload packages
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: build
           path: build
@@ -109,7 +109,7 @@ jobs:
           PKR_VAR_dokku_version="${VERSION:1}" make image/build/digitalocean
 
       - name: upload packages
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: digitalocean-manifest.json
           path: digitalocean-manifest.json

From 59867f20ad1d0a82dcadacc01b660046578cc317 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 27 Feb 2026 13:52:51 +0000
Subject: [PATCH 418/427] chore(deps): bump phusion/baseimage from noble-1.0.2
 to noble-1.0.3

Bumps phusion/baseimage from noble-1.0.2 to noble-1.0.3.

---
updated-dependencies:
- dependency-name: phusion/baseimage
  dependency-version: noble-1.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index dead75810..5c9b063aa 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM phusion/baseimage:noble-1.0.2
+FROM phusion/baseimage:noble-1.0.3
 
 CMD ["/sbin/my_init"]
 

From 383f70f981296c3a51660f9b969e07df9b1a7b3b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 27 Feb 2026 13:54:30 +0000
Subject: [PATCH 419/427] chore(deps): bump whitenoise in
 /tests/apps/dockerfile-release

Bumps [whitenoise](https://github.com/evansd/whitenoise) from 6.11.0 to 6.12.0.
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](https://github.com/evansd/whitenoise/compare/6.11.0...6.12.0)

---
updated-dependencies:
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/dockerfile-release/Pipfile.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/apps/dockerfile-release/Pipfile.lock b/tests/apps/dockerfile-release/Pipfile.lock
index de435190e..909800483 100644
--- a/tests/apps/dockerfile-release/Pipfile.lock
+++ b/tests/apps/dockerfile-release/Pipfile.lock
@@ -156,12 +156,12 @@
         },
         "whitenoise": {
             "hashes": [
-                "sha256:0f5bfce6061ae6611cd9396a8231e088722e4fc67bc13a111be74c738d99375f",
-                "sha256:b2aeb45950597236f53b5342b3121c5de69c8da0109362aee506ce88e022d258"
+                "sha256:f723ebb76a112e98816ff80fcea0a6c9b8ecde835f8ddda25df7a30a3c2db6ad",
+                "sha256:fc5e8c572e33ebf24795b47b6a7da8da3c00cff2349f5b04c02f28d0cc5a3cc2"
             ],
             "index": "pypi",
-            "markers": "python_version >= '3.9'",
-            "version": "==6.11.0"
+            "markers": "python_version >= '3.10'",
+            "version": "==6.12.0"
         }
     },
     "develop": {}

From bc9873c75d05114b0a3659679c8baeeb4cbc1f79 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 05:02:41 +0000
Subject: [PATCH 420/427] chore(deps): bump gunicorn in
 /tests/apps/python-flask

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.2 to 25.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/25.0.2...25.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/python-flask/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/python-flask/requirements.txt b/tests/apps/python-flask/requirements.txt
index 1859f621c..ff049689c 100644
--- a/tests/apps/python-flask/requirements.txt
+++ b/tests/apps/python-flask/requirements.txt
@@ -1,5 +1,5 @@
 Flask==3.1.3
 Jinja2==3.1.6
 Werkzeug==3.1.6
-gunicorn==25.0.2
+gunicorn==25.1.0
 

From dcf93a46107523089f4b1955d142e530a1a7dd48 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
Date: Sun, 1 Mar 2026 00:07:47 -0500
Subject: [PATCH 421/427] fix: call correct function for limiting letsencrypt
 to certain domains

---
 plugins/openresty-vhosts/internal-functions | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/openresty-vhosts/internal-functions b/plugins/openresty-vhosts/internal-functions
index 7e51882d5..910a517ed 100755
--- a/plugins/openresty-vhosts/internal-functions
+++ b/plugins/openresty-vhosts/internal-functions
@@ -255,7 +255,7 @@ fn-openresty-template-compose-file() {
     OPENRESTY_LETSENCRYPT_EMAIL="$(fn-openresty-letsencrypt-email)"
     OPENRESTY_LETSENCRYPT_SERVER="$(fn-openresty-letsencrypt-server)")
 
-  local ALLOWED_DOMAINS_FUNC_BASE64="$(fn-fn-openresty-allowed-letsencrypt-domains-func-base64)"
+  local ALLOWED_DOMAINS_FUNC_BASE64="$(fn-openresty-allowed-letsencrypt-domains-func-base64)"
   if [[ -n "$ALLOWED_DOMAINS_FUNC_BASE64" ]]; then
     SIGIL_PARAMS+=(ALLOWED_DOMAINS_FUNC_BASE64="$ALLOWED_DOMAINS_FUNC_BASE64")
   fi

From 5648d05b7e5f071c9e5a4c2e9797919416a6a71c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 07:11:07 +0000
Subject: [PATCH 422/427] chore(deps): bump rack from 3.2.4 to 3.2.5 in
 /tests/apps/ruby

Bumps [rack](https://github.com/rack/rack) from 3.2.4 to 3.2.5.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rack/rack/compare/v3.2.4...v3.2.5)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 3.2.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/ruby/Gemfile.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/apps/ruby/Gemfile.lock b/tests/apps/ruby/Gemfile.lock
index 0207af4ad..fb98d5109 100644
--- a/tests/apps/ruby/Gemfile.lock
+++ b/tests/apps/ruby/Gemfile.lock
@@ -7,7 +7,7 @@ GEM
     logger (1.7.0)
     mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
-    rack (3.2.4)
+    rack (3.2.5)
     rack-protection (4.2.1)
       base64 (>= 0.1.0)
       logger (>= 1.6.0)
@@ -44,7 +44,7 @@ CHECKSUMS
   eventmachine (1.2.7) sha256=994016e42aa041477ba9cff45cbe50de2047f25dd418eba003e84f0d16560972
   logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
   mustermann (3.0.4) sha256=85fadcb6b3c6493a8b511b42426f904b7f27b282835502233dd154daab13aa22
-  rack (3.2.4) sha256=5d74b6f75082a643f43c1e76b419c40f0e5527fcfee1e669ac1e6b73c0ccb6f6
+  rack (3.2.5) sha256=4cbd0974c0b79f7a139b4812004a62e4c60b145cba76422e288ee670601ed6d3
   rack-protection (4.2.1) sha256=cf6e2842df8c55f5e4d1a4be015e603e19e9bc3a7178bae58949ccbb58558bac
   rack-session (2.1.1) sha256=0b6dc07dea7e4b583f58a48e8b806d4c9f1c6c9214ebc202ec94562cbea2e4e9
   ruby2_keywords (0.0.5) sha256=ffd13740c573b7301cf7a2e61fc857b2a8e3d3aff32545d6f8300d8bae10e3ef

From d90172cabc6c089105f11bc5ab1619371e17ab0c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 07:12:06 +0000
Subject: [PATCH 423/427] chore(deps): bump qs from 6.14.1 to 6.14.2 in
 /tests/apps/checks-root

Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/checks-root/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/apps/checks-root/package-lock.json b/tests/apps/checks-root/package-lock.json
index 212a6ebc3..39c443fd4 100644
--- a/tests/apps/checks-root/package-lock.json
+++ b/tests/apps/checks-root/package-lock.json
@@ -575,9 +575,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.14.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
-      "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
+      "version": "6.15.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.0.tgz",
+      "integrity": "sha512-mAZTtNCeetKMH+pSjrb76NAM8V9a05I9aBZOHztWy/UqcJdQYNsf59vrRKWnojAT9Y+GbIvoTBC++CPHqpDBhQ==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "side-channel": "^1.1.0"

From f20ea228121dbe8fffaf0bff4df7975427372ae3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 07:12:08 +0000
Subject: [PATCH 424/427] chore(deps): bump google.golang.org/grpc in
 /tests/apps/gogrpc

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/gogrpc/go.mod | 10 +++++-----
 tests/apps/gogrpc/go.sum | 42 +++++++++++++++++++++-------------------
 2 files changed, 27 insertions(+), 25 deletions(-)

diff --git a/tests/apps/gogrpc/go.mod b/tests/apps/gogrpc/go.mod
index fc429a1cb..069a97d77 100644
--- a/tests/apps/gogrpc/go.mod
+++ b/tests/apps/gogrpc/go.mod
@@ -3,10 +3,10 @@ module github.com/dokku/dokko/tests/apps/gorpc
 go 1.25.5
 
 require (
-	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
-	google.golang.org/grpc v1.78.0
+	golang.org/x/net v0.48.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
+	google.golang.org/grpc v1.79.1
 )
 
 require (
@@ -14,4 +14,4 @@ require (
 	google.golang.org/protobuf v1.36.11
 )
 
-require google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda // indirect
+require google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
diff --git a/tests/apps/gogrpc/go.sum b/tests/apps/gogrpc/go.sum
index 2406c744f..36dc3b4be 100644
--- a/tests/apps/gogrpc/go.sum
+++ b/tests/apps/gogrpc/go.sum
@@ -1,3 +1,5 @@
+github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
+github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
 github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
@@ -10,28 +12,28 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8=
-go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
-go.opentelemetry.io/otel/metric v1.38.0 h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA=
-go.opentelemetry.io/otel/metric v1.38.0/go.mod h1:kB5n/QoRM8YwmUahxvI3bO34eVtQf2i4utNVLr9gEmI=
-go.opentelemetry.io/otel/sdk v1.38.0 h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E=
-go.opentelemetry.io/otel/sdk v1.38.0/go.mod h1:ghmNdGlVemJI3+ZB5iDEuk4bWA3GkTpW+DOoZMYBVVg=
-go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM=
-go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA=
-go.opentelemetry.io/otel/trace v1.38.0 h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE=
-go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs=
-golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
-golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+go.opentelemetry.io/otel v1.39.0 h1:8yPrr/S0ND9QEfTfdP9V+SiwT4E0G7Y5MO7p85nis48=
+go.opentelemetry.io/otel v1.39.0/go.mod h1:kLlFTywNWrFyEdH0oj2xK0bFYZtHRYUdv1NklR/tgc8=
+go.opentelemetry.io/otel/metric v1.39.0 h1:d1UzonvEZriVfpNKEVmHXbdf909uGTOQjA0HF0Ls5Q0=
+go.opentelemetry.io/otel/metric v1.39.0/go.mod h1:jrZSWL33sD7bBxg1xjrqyDjnuzTUB0x1nBERXd7Ftcs=
+go.opentelemetry.io/otel/sdk v1.39.0 h1:nMLYcjVsvdui1B/4FRkwjzoRVsMK8uL/cj0OyhKzt18=
+go.opentelemetry.io/otel/sdk v1.39.0/go.mod h1:vDojkC4/jsTJsE+kh+LXYQlbL8CgrEcwmt1ENZszdJE=
+go.opentelemetry.io/otel/sdk/metric v1.39.0 h1:cXMVVFVgsIf2YL6QkRF4Urbr/aMInf+2WKg+sEJTtB8=
+go.opentelemetry.io/otel/sdk/metric v1.39.0/go.mod h1:xq9HEVH7qeX69/JnwEfp6fVq5wosJsY1mt4lLfYdVew=
+go.opentelemetry.io/otel/trace v1.39.0 h1:2d2vfpEDmCJ5zVYz7ijaJdOF59xLomrvj7bjt6/qCJI=
+go.opentelemetry.io/otel/trace v1.39.0/go.mod h1:88w4/PnZSazkGzz/w84VHpQafiU4EtqqlVdxWy+rNOA=
+golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
+golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
 gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda h1:i/Q+bfisr7gq6feoJnS/DlpdwEL4ihp41fvRiM3Ork0=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
-google.golang.org/grpc v1.78.0 h1:K1XZG/yGDJnzMdd/uZHAkVqJE+xIDOcmdSFZkBUicNc=
-google.golang.org/grpc v1.78.0/go.mod h1:I47qjTo4OKbMkjA/aOOwxDIiPSBofUtQUI5EfpWvW7U=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 h1:gRkg/vSppuSQoDjxyiGfN4Upv/h/DQmIR10ZU8dh4Ww=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
+google.golang.org/grpc v1.79.1 h1:zGhSi45ODB9/p3VAawt9a+O/MULLl9dpizzNNpq7flY=
+google.golang.org/grpc v1.79.1/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236 h1:wTUkwrodi4IuWD3kYkMUwCU8BhwFaqDywrXmsthCvQA=
 google.golang.org/grpc/examples v0.0.0-20240118175532-987df1309236/go.mod h1:j5uROIAAgi3YmtiETMt1LW0d/lHqQ7wwrIY4uGRXLQ4=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=

From b99e9647e14ccac9fbc61b2ea0ef435ece5e5a8f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 07:12:17 +0000
Subject: [PATCH 425/427] chore(deps): bump python in /docs/_build

Bumps python from 3.14.2-alpine to 3.14.3-alpine.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.3-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docs/_build/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_build/Dockerfile b/docs/_build/Dockerfile
index e6be17b54..d30d0700f 100644
--- a/docs/_build/Dockerfile
+++ b/docs/_build/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.14.2-alpine
+FROM python:3.14.3-alpine
 
 WORKDIR /usr/src/app
 

From 58a56e7da3f897f7ff427d334a5faa509f81964f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 07:12:23 +0000
Subject: [PATCH 426/427] chore(deps): bump flask from 3.1.2 to 3.1.3 in
 /tests/apps/multi

Bumps [flask](https://github.com/pallets/flask) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/3.1.3/CHANGES.rst)
- [Commits](https://github.com/pallets/flask/compare/3.1.2...3.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/multi/requirements.txt b/tests/apps/multi/requirements.txt
index 3eebdd625..7138e7685 100644
--- a/tests/apps/multi/requirements.txt
+++ b/tests/apps/multi/requirements.txt
@@ -1,2 +1,2 @@
-Flask==3.1.2
+Flask==3.1.3
 gunicorn==25.0.2

From 7be2754ab24ba18d9d2f5d67c6820d4709382b47 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Mar 2026 09:48:56 +0000
Subject: [PATCH 427/427] chore(deps): bump gunicorn from 25.0.2 to 25.1.0 in
 /tests/apps/multi

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.2 to 25.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/25.0.2...25.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tests/apps/multi/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/apps/multi/requirements.txt b/tests/apps/multi/requirements.txt
index 7138e7685..8eac0e028 100644
--- a/tests/apps/multi/requirements.txt
+++ b/tests/apps/multi/requirements.txt
@@ -1,2 +1,2 @@
 Flask==3.1.3
-gunicorn==25.0.2
+gunicorn==25.1.0